Vulnerability
Published 2026-10-27 New
Verified 2026-10-24
Google Brotli (CVE-2026-111497)
Google Brotli Unchecked Return Value Vulnerability. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Google Brotli
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-111497
