An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0. The flaw occurs when a client creates multiple streams in a single RPC and the server response contains fewer extra_stream_ids than expected, leading to an out-of-bounds read. This can cause the client process to crash (denial of service) or leak unintended memory contents. The issue is fixed in version 1.18.0.