CVE-2026-61916: Apache bRPC 0 to before 1.18.0

Affected technology

Apache bRPC · 0 to before 1.18.0
Apache Software Foundation

Description’s affected range: before version 1.18.0 on platforms where plain char is unsigned

Component: Not specified by the source

Remote attackers can cause a process crash and denial of service by sending crafted input containing bytes with the high bit set.

Published 21-Oct-2026 16:14 UTC

GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC