CVE-2026-58064: Apache bRPC 0 to before 1.18.0

Affected technology

Apache bRPC · 0 to before 1.18.0
Apache Software Foundation

Description’s affected range: before a complete CRLF-terminated command was available

Component: Not specified by the source

What an attacker can do

A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminating CRLF to increase memory usage and CPU copy overhead, potentially causing denial of service.