Skip to content
OpenAdvisories

Weakness (CWE)

CWE-475: Undefined Behavior for Input to API

Base Incomplete

The behavior of this function is undefined unless its control parameter is set to a specific value.

Source: MITRE CWE-475

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-75595

    Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose h…

    netty netty druid trino-plugin-opensearch Debian Ubuntu Wolfi Maven