Apache Kafka brokers can run out of memory from protocol arrays (CVE-2026-111108)
Code-generated readers size arrays from a sender-declared count checked only against remaining buffer bytes.
1 stories, newest first · one card per story
Code-generated readers size arrays from a sender-declared count checked only against remaining buffer bytes.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views