HIGHVulnerability
Verified
Global
CISA KEV: Google Brotli — Google Brotli Unchecked Return Value Vulnerability
·Source: CISA KEV
Updated:
Executive Summary
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Analysis
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-27. Remediation due: 2026-11-10.