Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially
| CVE | CVE-2026-111497 |
|---|---|
| 정보원 | The Hacker News |
| 수집 시각 | 2026. 10. 24. 오후 07:18 |
| 데이터 | Markdown JSON |
2026. 10. 24. 오후 05:45, The Hacker News에서 "Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software"을(를) 게시했습니다 (유형: 보안 뉴스). 관련 기술: JavaScript / Node.js, Python. CVE: CVE-2026-111497.