CVE-2026-111497
ADVISORY - githubSummary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Common Weakness Enumeration (CWE)
Unchecked Return Value
Out-of-bounds Write
Docker
BSA-2026-111497
-
Docker
CVE-2026-111497
-
NIST
CVSS SCORE
9.2criticalGitHub
3.9
CVSS SCORE
9.2criticalAlpine
-
Debian
-
CVSS SCORE
N/AlowUbuntu
3.9
CVSS SCORE
9.8highGoLang
-
PypA
PYSEC-2026-4322
-
CVSS SCORE
9.2criticalPypA
PYSEC-2026-4323
-
CVSS SCORE
9.2criticalAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAlma
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighBitnami
BIT-brotli-2026-111497
-
CVSS SCORE
9.2criticalBitnami
BIT-dotnet-2026-111497
-
CVSS SCORE
9.2criticalBitnami
BIT-dotnet-sdk-2026-111497
-
CVSS SCORE
9.2criticalBitnami
BIT-node-2026-111497
-
CVSS SCORE
9.2criticalBitnami
BIT-node-min-2026-111497
-
CVSS SCORE
9.2criticalBitnami
BIT-powershell-2026-111497
-
CVSS SCORE
9.2criticalRed Hat
2.2
CVSS SCORE
8.1highRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighRocky
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighOracle
-
CVSS SCORE
N/AhighChainguard
CGA-6gfc-35xm-gf55
-
Photon
CVE-2026-111497
-
CVSS SCORE
9.8criticalCISA
CVE-2026-111497
-
minimos
MINI-278r-vvhg-5xpp
-
minimos
MINI-2j85-m9pr-99q2
-
minimos
MINI-3q6c-m9jr-9h27
-
minimos
MINI-4h3g-8mf2-38pr
-
minimos
MINI-5r84-cw7p-35vp
-
minimos
MINI-5x8q-fjqf-v6v6
-
minimos
MINI-66v7-8cmw-jh7w
-
minimos
MINI-6935-25wc-xf5m
-
minimos
MINI-6984-g3cx-4xfg
-
minimos
MINI-69x2-3wp2-476x
-
minimos
MINI-7827-8x48-f9wm
-
minimos
MINI-78vx-qj6r-m47m
-
minimos
MINI-7x4f-j5ph-3wch
-
minimos
MINI-9f8x-r6w4-h4hr
-
minimos
MINI-c3rm-mvr5-7jxv
-
minimos
MINI-c9r7-2j96-35j8
-
minimos
MINI-f4rg-q3x5-7gpw
-
minimos
MINI-gqmc-9vr5-r9fh
-
minimos
MINI-h6pp-pc6c-5rq7
-
minimos
MINI-hfvh-4c89-6962
-
minimos
MINI-jgg4-47v2-24qr
-
minimos
MINI-p69v-r6v8-pc3m
-
minimos
MINI-pcf7-vm2m-4587
-
minimos
MINI-q727-47g8-q8g4
-
minimos
MINI-q7h6-j6r9-cj3r
-
minimos
MINI-q976-rj6f-2ghp
-
minimos
MINI-qhwh-29r8-mq96
-
minimos
MINI-rfcj-gv9p-m95h
-
minimos
MINI-rjx5-mv6w-gxfg
-
minimos
MINI-wcj9-8cf7-mp2x
-
minimos
MINI-wrw7-p9j5-26jr
-
minimos
MINI-xx3p-mf6j-v2g7
-