CVE-2026-114349

A flaw was found in Apache Kafka. An authenticated attacker with write permissions to a topic can cause a Denial of Service DoS by sending a specially crafted compressed record batch. Because the broker allocates memory based on an unvalidated record size declared in the decompressed data stream,...