Junglewise Threat Intelligence

CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

CVE-2021-37136 · Severity: low · CVSS 3.1 · Published 2021-09-09

Technologies: io.netty:netty (Maven), org.jboss.netty:netty (Maven), io.netty:netty-codec (Maven). Vendors: Maven.

Executive brief

Bzip2Decoder doesn't allow setting size restrictions for decompressed data

Affected products

  • Maven io.netty:netty
  • Maven org.jboss.netty:netty
  • Maven io.netty:netty-codec

Related threats