CVE-2026-111497 | Google Brotli up to 1.0.3/1.1.0/1.2.0 Brotli decoder c/dec/decode.c buffer overflow

October 22, 2026 Yanac

A vulnerability was found in Google Brotli up to 1.0.3/1.1.0/1.2.0 and classified as critical. This vulnerability affects unknown code of the file c/dec/decode.c of the component Brotli decoder. Executing a manipulation can lead to buffer overflow.

This vulnerability is handled as CVE-2026-111497. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More