Medium severity5.9NVD Advisory· Published Oct 26, 2026· Updated Oct 26, 2026
CVE-2026-116540
CVE-2026-116540
Description
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.
Affected products
1- Range: <2.0.84.Final
Patches
Vulnerability mechanics
References
5- github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/sslcontext.cnvd
- github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f31c81a118nvd
- github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Finalnvd
- github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvwnvd
- www.vulncheck.com/advisories/netty-tcnative-2.0.66-final-before-2.0.84-final-use-after-free-in-session-ticket-callbacknvd
News mentions
0No linked articles in our index yet.