A critical memory-corruption vulnerability in Google’s Brotli decoder, tracked as CVE-2026-111497, impacts widely used software including Bun, Python Brotli packages, and Envoy proxies. Exploiting this flaw via maliciously crafted compressed data can lead to buffer overflows and potential remote code execution. Administrators should apply available patches immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →