{"id":"CVE-2026-111497","url":"https://compromised.live/t/CVE-2026-111497","kind":"exploited_vuln","tier":1,"severity":"high","title":"Google Brotli: Google Brotli Unchecked Return Value Vulnerability","summary":"A remote attacker can send a specially crafted Brotli-compressed stream to corrupt memory, read sensitive memory contents, crash the program, or possibly run arbitrary code, and this flaw is being actively exploited. PyPI packages brotli (versions 1.0.3 up to 1.2.1) and brotlicffi (versions 1.0.3 up to 1.2.1.0). Upgrade brotli to 1.2.1 and brotlicffi to 1.2.1.0 now, and check for signs of compromise.","summary_source":"ai","affected":[{"ecosystem":"PyPI","package":"brotli","affected":">= 1.0.3 < 1.2.1","fixed":["1.2.1"]},{"ecosystem":"PyPI","package":"brotlicffi","affected":">= 1.0.3 < 1.2.1.0","fixed":["1.2.1.0"]}],"epss":null,"kev":{"date_added":"2026-10-27","due_date":"2026-11-10","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.","aliases":["BIT-brotli-2026-111497","BIT-dotnet-2026-111497","BIT-dotnet-sdk-2026-111497","BIT-node-2026-111497","BIT-node-min-2026-111497","BIT-powershell-2026-111497","CVE-2026-111497","GHSA-9v8h-qqgm-4m35","PYSEC-2026-4322","PYSEC-2026-4323"],"sources":[{"name":"kev","id":"CVE-2026-111497","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497"}]}