AZL-6341 CVE-2020-8927 affecting package brotli for versions less than 1.0.7-10

🗓️ 15 Sep 2020 10:15:12Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Brotli vulnerability 2020 8927 affects versions before 1.0.8; buffer overflow in one shot decompression; upgrade to 1.0.8+ or use streaming API.

Reporter	Title	Published	Views	Family All 199
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1	2 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.15-alt1	2 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.23-alt1	2 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.23-alt1	2 Apr 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:29	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0118: brotli (ALINUX3-SA-2022:0118)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : brotli (ALSA-2021:1702)	9 Feb 202200:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8927

21 Apr 2026 04:32Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.0031