Denial of Service Vulnerability in Netty Framework by Netty

CVE-2025-25193

What is CVE-2025-25193?

The Netty framework, a renowned asynchronous network application framework, features a vulnerability due to an unsafe reading of an environment file, which can trigger a denial of service when running on Windows applications. If an attacker creates an excessively large environment file, it can lead to the application crashing. This vulnerability is reminiscent of a previously resolved issue but remained incomplete as null-bytes weren't adequately addressed in the fix. The updated commit provides a resolution to this ongoing issue.

References