Brotli vulnerabilities
1 published alerts for Google Brotli.
Actively exploited (KEV)
Google Brotli Unchecked Return Value Vulnerability
Google Brotli is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-111497). Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. CISA remediation due date: 2026-11-10. If you need help checking exposure, call (864) 335-9223.