One AI SAST scan of Apache Kafka surfaced attacker-controlled size fields flowing into memory allocations across three ...