Brotli Decoder Memory Corruption Enables RCE in Node.js, Bun, Python and More
CVE-2026-111497 in Google’s Brotli decoder allows crafted data to overwrite memory, enabling RCE in Node.js, Bun, Python and other software.
1 stories
CVE-2026-111497 in Google’s Brotli decoder allows crafted data to overwrite memory, enabling RCE in Node.js, Bun, Python and other software.