CVE-2026-114349 Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before validating it against the bytes available or any configured limit. The size is attacker-controlled, and the batch CRC does not...

CVE-2026-114349

Apache Kafka is vulnerable to a Denial of Service (DoS) because the broker decodes a compressed record batch and allocates a buffer based on an attacker-controlled declared body size before performing validation. A small, CRC-valid compressed request can declare a body size of up to 2 GiB , trigg...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

PT-2026-128297

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before validating it against the bytes available or any configured limit. The size is attacker-controlled, and the batch CRC does not...

Freedom Fighting - A collection of scripts which may come in handy during your freedom fighting activities

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License. nojail.py ...