CVE-2026-114349

Apache Kafka is vulnerable to a Denial of Service (DoS) because the broker decodes a compressed record batch and allocates a buffer based on an attacker-controlled declared body size before performing validation. A small, CRC-valid compressed request can declare a body size of up to 2 GiB , trigg...