Kafka deserializers can exhaust memory from a size field (CVE-2026-111551)
Apache calls the flaw important: a small input can declare a huge size and force a large allocation.
1 stories, newest first · one card per story
Apache calls the flaw important: a small input can declare a huge size and force a large allocation.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views