diff --git a/spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessor.java b/spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessor.java
index ed86ade4da6..0bf8037b2e0 100644
--- a/spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessor.java
+++ b/spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessor.java
@@ -154,7 +154,7 @@ public class HttpEntityMethodProcessor extends AbstractMessageConverterMethodPro
 					"' in method " + parameter.getMethod() + " is not parameterized");
 		}
 
-		Object body = readWithMessageConverters(webRequest, parameter, paramType);
+		Object body = readWithMessageConverters(inputMessage, parameter, paramType);
 		if (RequestEntity.class == parameter.getParameterType()) {
 			return new RequestEntity<>(body, inputMessage.getHeaders(),
 					inputMessage.getMethod(), inputMessage.getURI());
diff --git a/spring-webmvc/src/test/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessorTests.java b/spring-webmvc/src/test/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessorTests.java
index 3674f73796b..90e31d37f39 100644
--- a/spring-webmvc/src/test/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessorTests.java
+++ b/spring-webmvc/src/test/java/org/springframework/web/servlet/mvc/method/annotation/HttpEntityMethodProcessorTests.java
@@ -36,6 +36,7 @@ import org.springframework.core.MethodParameter;
 import org.springframework.http.HttpEntity;
 import org.springframework.http.HttpHeaders;
 import org.springframework.http.MediaType;
+import org.springframework.http.RequestEntity;
 import org.springframework.http.ResponseEntity;
 import org.springframework.http.converter.ByteArrayHttpMessageConverter;
 import org.springframework.http.converter.HttpMessageConverter;
@@ -131,6 +132,26 @@ public class HttpEntityMethodProcessorTests {
 		assertThat(result.getBody()).isNull();
 	}
 
+	@Test // gh-36298
+	@SuppressWarnings("unchecked")
+	void shouldResolveEntityWithMutatedHeaders() throws Exception {
+		servletRequest.setMethod("POST");
+		servletRequest.addParameter("project", "spring%20framework");
+		servletRequest.addHeader("Content-Length", "project=spring%20framework".length());
+		servletRequest.setContentType(MediaType.APPLICATION_FORM_URLENCODED_VALUE);
+
+		List<HttpMessageConverter<?>> converters = new ArrayList<>();
+		converters.add(new ByteArrayHttpMessageConverter());
+		HttpEntityMethodProcessor processor = new HttpEntityMethodProcessor(converters);
+
+		Method method = getClass().getDeclaredMethod("resolveAsByteArray", RequestEntity.class);
+		MethodParameter requestEntity = new MethodParameter(method, 0);
+		HttpEntity<byte[]> result = (HttpEntity<byte[]>) processor.resolveArgument(requestEntity,
+				this.mavContainer, this.webRequest, this.binderFactory);
+
+		assertThat(result.getBody().length).isEqualTo(result.getHeaders().getContentLength());
+	}
+
 	@Test
 	void resolveGenericArgument() throws Exception {
 		String content = "[{\"name\" : \"Jad\"}, {\"name\" : \"Robert\"}]";
@@ -271,6 +292,9 @@ public class HttpEntityMethodProcessorTests {
 		return null;
 	}
 
+	private void resolveAsByteArray(RequestEntity<byte[]> request) {
+	}
+
 
 	@SuppressWarnings("unused")
 	private abstract static class MyParameterizedController<DTO extends Identifiable> {