CVE-2026-111497Critical· 9.2▾ AbyssalPoC availableA buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive m…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 50.6 · likelihood 11.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.5%
9.2 → 8.1
critical → high
8.1 → 9.2
high → critical
9.2 → 8.1
critical → high
8.1 → 9.2
high → critical
Last analysed / modified upstream
0.5% → 55%
58 GitHub repos (last check)
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
github.com/google/brotli >= 1.0.3 < 1.0.10github.com/google/brotli >= 1.1.0 < 1.1.1github.com/google/brotli >= 1.2.0 < 1.2.1Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Affected packages:
brotli >= 1.0.3, < 1.2.1brotlicffi >= 1.0.3, < 1.2.1.0Patched in:
brotli 1.2.1brotlicffi 1.2.1.0Source: https://osv.dev/vulnerability/GHSA-9v8h-qqgm-4m35
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
GHSA-9v8h-qqgm-4m35CriticalBrotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
CVE-2026-95316Low· 2.9Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program
CVE-2026-113310Medium· 6.5Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page
CVE-2026-113309Medium· 6.5Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page
CVE-2026-113329Medium· 6.5Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page
CVE-2026-113277Medium· 6.5Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page