Tag: brotli flaw
2 articles
Brotli Flaw Exposes Sensitive Data Across Multiple Ecosystems
A critical buffer-overflow flaw, known as CVE-2026-111497, has been discovered in the Brotli C decoder, which can be exploited by specially crafted compressed data to expose sensitive information across multiple ecosystems. This vulnerability can lead to process crashes, memory disclosure, and even remote code execution, making it a serious threat to security.
Microsoft Disrupts .NET with Emergency Patches for Brotli Flaw
Microsoft has urgently patched a critical flaw in the .NET framework's Brotli decoder, known as Broccoli2Shell, that could let attackers crash systems, leak memory, or even execute remote code. This vulnerability, discovered by Imperva Red Team, affects devices with vulnerable Brotli binaries or libraries.