CVE-2026-111108

Apache Kafka is vulnerable to a Denial of Service (DoS) because its code-generated protocol readers pre-size array collections based on a sender's declared element count. The system incorrectly validates this count against the request buffer size (assuming one byte per element), allowing a reques...