Vulnerability
Published 2026-10-27 New
Verified 2026-10-24

Google Brotli (CVE-2026-111497)

Google Brotli Unchecked Return Value Vulnerability. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Apply vendor mitigations.

Check the NVD record and the vendor advisory for affected versions and the patch.

Product
Google Brotli
Exploited in Australia?
unknown

vulnerabilities