Threats tagged 'oesa-2026-4541'

A critical buffer overflow vulnerability exists in the Brotli decoder in Google Brotli versions 1.0.3 through 1.2.0. This flaw allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, potentially leading to sensitive memory disclosure, denial of service, or arbitrary code execution. The issue is fixed in version 1.1.1-1.oe2403sp1 and later. Users should update affected Brotli libraries or binaries to a patched version to mitigate the risk.