Node.js patches Brotli decoder out-of-bounds write CVE-2026-111497
Malformed Brotli input can overflow an 8-byte buffer in Node.js's node:zlib decoder. Node.js 22.23.4, 24.22.1 and 26.12.1 fix CVE-2026-111497.
· 3 minTopic
Cve 2026 111497
Coverage tagged cve 2026 111497.
- Articles
- 1
- Desk
- 1