GHSA-f659-372h-6x3xMedium

netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures

Published
May 26, 2026
Last Modified
May 26, 2026

🔗 CVE IDs covered (1)

📋 Description

HKDF_expand: returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key.

When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key.

🎯 Affected products1

  • maven/io.netty.incubator:netty-incubator-codec-ohttp:< 0.0.21.Final

🔗 References (2)