edk2-security

EDK2 BrotliCustomDecompressLib — heap overflow unfixed A heap-buffer-overflow in EDK2's own Brotli decompression glue MdeModulePkg/Library/BrotliCustomDecompressLib, present since 2017, unfixed at HEAD as of 2026-10-25. ASAN-confirmed with a proof-of-concept and an end-to-end controlled-corruptio...