CVE-2026-111108

A flaw was found in Apache Kafka. Due to improper input validation during protocol request parsing, the service pre-allocates disproportionately large memory collections based on the sender's declared array element count without verifying that the request buffer contains sufficient data. A remote...