CVE-2026-111497
- Source
- https://cve.org/CVERecord?id=CVE-2026-111497
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-111497.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-111497
- Aliases
- Downstream
ALPINE (1)
BELL (1)
CGA (14)
DEBIAN (1)
ECHO (1)
openSUSE (2)
ROOT (8)
UBUNTU (1)
- Related
- Published
- 2026-10-22T13:35:41Z
- Modified
- 2026-10-27T08:42:03Z
- Severity
-
- 9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Out-of-Bounds Write in Google Brotli Decoder
- Details
-
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
- Database specific
{ "cna_assigner": "Google", "cwe_ids": [ "CWE-252", "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111497.json" }- References
-
- http://www.openwall.com/lists/oss-security/2026/10/23/25
- http://www.openwall.com/lists/oss-security/2026/10/24/6
- http://www.openwall.com/lists/oss-security/2026/10/26/12
- http://www.openwall.com/lists/oss-security/2026/10/26/13
- http://www.openwall.com/lists/oss-security/2026/10/26/16
- https://broccoli2shell.com
- https://github.com/google/brotli/releases/tag/v1.0.10
- https://github.com/google/brotli/releases/tag/v1.1.1
- https://github.com/google/brotli/releases/tag/v1.2.1
- https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html
- https://patchtheplanet.org/brotli
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111497.json
- https://github.com/advisories/GHSA-9v8h-qqgm-4m35
- https://nvd.nist.gov/vuln/detail/CVE-2026-111497
- https://github.com/dotnet/announcements/issues/494
- https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
- https://github.com/google/brotli
- https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497
Affected packages
Git / github.com/google/brotli
Affected ranges
- Type
- GIT
- Repo
- https://github.com/google/brotli
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "1.0.3" }, { "fixed": "1.0.10" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "1.1.0" }, { "fixed": "1.1.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "1.2.0" }, { "fixed": "1.2.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "original_tag": "v1.2.1", "range": [ { "fixed": "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v1.1.1", "range": [ { "fixed": "db0631dfea829194206d269bc7b25d0908cdb97d" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v1.0.10", "range": [ { "fixed": "3646606894cd8b8c75d79a569b6c95a33c699d63" } ], "source": "REFERENCES_TAG" } ] }