IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.2Kritik KEV

CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Heliox Dual Port 60kW; Siemens Heliox Flex Pro; Siemens SICHARGE FLEX Yayım: (11 gün önce)

Aktif olarak istismar ediliyor — Google Brotli Unchecked Return Value Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 27.10.2026 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 10.11.2026.

Gerekli işlem: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

Açıklama

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Zayıflık türü (CWE): CWE-787CWE-252

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
7-zip p7zip ≤ 16.02
andybalholm brotli < 1.2.7
anthropic bun < 1.4.4
apache arrow ≤ 26.0.0
clickhouse clickhouse ≤ 26.10.2.103
debian debian linux 12.0
duckdb duckdb ≤ 2.0.0
envoyproxy envoy < 1.37.8
Google Brotli 1.0.3 – < 1.0.10, 1.1.0 – < 1.1.1, 1.2.0 – < 1.2.1
google woff2 —
istio istio < 1.29.9
mcmilk 7-zip-zstd ≤ 26.02-1.5.7-r2
microsoft .net 8.0.0 – < 8.0.33
nodejs node.js < 22.23.4
python-hyper brotlicffi < 1.2.1.0
Siemens Cloud Connector Configurator 0
siemens common configurator —
Siemens Common Configurator (CC on IEM) 0
Siemens Common Configurator on Device (CC on Edge) 0
Siemens Data Flow Monitoring 0
Siemens Databus Configurator 0
Siemens Edge OPC UA Server Configurator 0
Siemens Flow Creator Configurator 0
Siemens Heliox Dual Port 60kW —
Siemens Heliox Flex Pro —
siemens industrial edge cloud connector configurator —
siemens industrial edge databus configurator —
Siemens Industrial Edge Hub 0
Siemens Industrial Edge Management Cloud 0
Siemens RUGGEDCOM APE1808 0
siemens ruggedcom ape1808 firmware —
Siemens SICHARGE FLEX —
Siemens SICHARGE UC —
Siemens Sifinity Go —
Siemens Sifinity Setup —
Siemens VersiCharge AC Series —
Siemens VersiCloud —
tianocore edk2 ≤ 202608

Ubuntu düzeltmeleri

  • USN-8958-1 .NET vulnerabilities Ubuntu 26.10, 26.04, 24.04, 22.04 · 29.10.2026 · dotnet10, dotnet11, dotnet8
  • USN-8956-2 Brotli vulnerability Ubuntu 20.04, 18.04, 16.04 · 28.10.2026 · brotli
  • USN-8956-1 Brotli vulnerability Ubuntu 26.10, 26.04, 24.04, 22.04 · 26.10.2026 · brotli

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (45)
  • cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:* ≥ 1.0.3 < 1.0.10
  • cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:* ≥ 1.1.0 < 1.1.1
  • cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:* ≥ 1.2.0 < 1.2.1
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* < 22.23.4
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* ≥ 23.0.0 < 24.22.1
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* ≥ 25.0.0 < 26.12.1
  • cpe:2.3:a:python-hyper:brotlicffi:*:*:*:*:*:python:*:* < 1.2.1.0
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.33
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.22
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.14
  • cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net:11.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:* < 1.29.9
  • cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:* ≥ 1.30.0 < 1.30.6
  • cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:* ≥ 1.31.0 < 1.31.2
  • cpe:2.3:a:anthropic:bun:*:*:*:*:*:*:*:* < 1.4.4
  • cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* < 1.37.8
  • cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* ≥ 1.38.0 < 1.38.6
  • cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* ≥ 1.39.0 < 1.39.3
  • cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:* ≤ 202608
  • cpe:2.3:a:google:woff2:-:*:*:*:*:*:*:*
  • cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:* ≤ 2.0.0
  • cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:* ≤ 26.10.2.103
  • cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:* ≤ 26.0.0
  • cpe:2.3:a:apache:arrow:27.0.0:dev:*:*:*:*:*:*
  • cpe:2.3:a:mcmilk:7-zip-zstd:*:*:*:*:*:*:*:* ≤ 26.02-1.5.7-r2
  • cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:* ≤ 16.02
  • cpe:2.3:a:andybalholm:brotli:*:*:*:*:*:go:*:* < 1.2.7
  • cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:common_configurator:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:data_flow_monitoring:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:edge_opc_ua_server_configurator:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:flow_creator_configurator:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:industrial_edge_cloud_connector_configurator:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:industrial_edge_databus_configurator:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:industrial_edge_hub:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:industrial_edge_management_cloud:-:*:*:*:*:*:*:*

Aynı üründe son açıklar — Ubuntu 20.04 LTS

Puansız
CVE-2026-98912

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5Yüksek
CVE-2026-98911

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…

Puansız
CVE-2026-98907

btrfs: protect sb_write_pointer() with invalidate lock

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLK…

Puansız
CVE-2026-98900

xen/gntalloc: validate grant count before allocation

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc_ioctl_alloc() allocates the grant-id array before checking whether the requested count fits within the global grant limit. Coun…