CVE-2026-102465
- Source
- https://cve.org/CVERecord?id=CVE-2026-102465
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102465.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-102465
- Aliases
-
- GHSA-4wf9-p5hg-98w5
- Published
- 2026-10-15T07:27:55Z
- Modified
- 2026-10-28T02:30:44Z
- Severity
-
- 8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle position, can send a crafted RESP response declaring an extremely large array, push, or attribute length, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Vert.x event loop thread, denying service to all connections and verticles sharing that loop.
The impacted component is io.vertx:vertx-mysql-client.
- Database specific
{ "cna_assigner": "eclipse", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102465.json" }- References
Affected packages
Git / github.com/eclipse-vertx/vert.x
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vert.x
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vertx-sql-client
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
- Type
- GIT
- Repo
- https://github.com/vert-x3/vertx-redis-client
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "4.0.0" }, { "last_affected": "4.5.34" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.0.0" }, { "last_affected": "5.0.12" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.1.0" }, { "last_affected": "5.1.9" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] }
- Type
- GIT
- Repo
- https://github.com/vert-x3/vertx-web
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.35" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:*", "range": [ { "introduced": "5.0.0" }, { "fixed": "5.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:eclipse:vert.x:5.2.0:*:*:*:*:*:*:*", "range": [ { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "CPE_STRING" } ] }
Affected versions
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.1.0
4.1.0.Beta1
4.1.0.CR1
4.1.0.CR2
4.1.1
4.2.0
4.2.0.Beta1
4.2.1
4.2.2
4.2.3
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.5.0
4.5.1
4.5.10
4.5.11
4.5.12
4.5.13
4.5.14
4.5.15
4.5.16
4.5.17
4.5.18
4.5.19
4.5.2
4.5.20
4.5.21
4.5.22
4.5.23
4.5.24
4.5.25
4.5.26
4.5.27
4.5.28
4.5.29
4.5.3
4.5.30
4.5.31
4.5.32
4.5.33
4.5.34
4.5.4
4.5.5
4.5.6
4.5.7
4.5.8
4.5.9
5.*
5.0.0
5.0.1
5.0.10
5.0.11
5.0.12
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.1.8
5.2.0