CVE-2026-111497

A buffer overflow vulnerability exists in the Brotli decoder (c/dec/decode.c) affecting Google Brotli versions 1.0.3 through 1.2.0 on all platforms. The flaw allows an unauthenticated remote attacker to provide a crafted Brotli-compressed stream to corrupt adjacent decoder state memory, leading t...