Vulnérabilité

CVE-2026-111497 activement exploitée : Google Brotli Unchecked Return Value

CISA KEV · 27 octobre 2026 à 19 h 00 · Gravité critique

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.