CVE-2026-59317

Published: Aug 27, 2026Modified: Sep 4, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: security@vmware.com (Secondary)

Description

DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for Apache Kafka 3.0.0 - 3.3.16 Spring for Apache Kafka 2.9.0 - 2.9.14 Spring for Apache Kafka 2.8.12 and earlier

Affected (5)

Products: Vmware: Spring For Apache Kafka

Vmware

1 product

Spring For Apache Kafka

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring For Apache Kafka	Up to 2.8.12
Vmware Spring For Apache Kafka	From 2.9.0 to 2.9.14
Vmware Spring For Apache Kafka	From 3.0.0 to 3.3.16
Vmware Spring For Apache Kafka	From 4.0.0 to 4.0.7
Vmware Spring For Apache Kafka	From 4.1.0 to 4.1.1

Related CWEs

CWE-1284

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://spring.io/security/cve-2026-59317

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.