CVE-2026-90484

The MySQL client response parser in Apache bRPC is vulnerable to a NULL pointer dereference when processing a zero-payload-length response packet from a server. The root cause resides in brpc::policy::MysqlReply::ConsumePartialIOBuf, where buf.fetch(header, 5) returns nullptr because the buffer o...