CVE-2026-111497 (Node2Shell)

Warnung

Medienbericht

EPSS 0.71%
Veröffentlicht 22.10.2026 13:35:41
Zuletzt bearbeitet 30.10.2026 20:30:11
Erkennungen
Login

Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.





Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Betroffene Produkte Warnungen 1 Metriken 3 CWE 2 Referenzen 36

NVD 45 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Brotli SwPlatform - Version >= 1.0.3 < 1.0.10

Google ≫ Brotli SwPlatform - Version >= 1.1.0 < 1.1.1

Google ≫ Brotli SwPlatform - Version >= 1.2.0 < 1.2.1

Nodejs ≫ Node.Js SwEdition - Version < 22.23.4

Nodejs ≫ Node.Js SwEdition - Version >= 23.0.0 < 24.22.1

Nodejs ≫ Node.Js SwEdition - Version >= 25.0.0 < 26.12.1

Python-hyper ≫ Brotlicffi SwPlatform python Version < 1.2.1.0

Microsoft ≫ .Net Version >= 8.0.0 < 8.0.33

Microsoft ≫ .Net Version >= 9.0.0 < 9.0.22

Microsoft ≫ .Net Version >= 10.0.0 < 10.0.14

Microsoft ≫ .Net Version 11.0.0 Update preview1

Microsoft ≫ .Net Version 11.0.0 Update preview2

Microsoft ≫ .Net Version 11.0.0 Update preview3

Microsoft ≫ .Net Version 11.0.0 Update preview4

Microsoft ≫ .Net Version 11.0.0 Update preview5

Microsoft ≫ .Net Version 11.0.0 Update preview6

Microsoft ≫ .Net Version 11.0.0 Update preview7

Microsoft ≫ .Net Version 11.0.0 Update rc1

Microsoft ≫ .Net Version 11.0.0 Update rc2

Debian ≫ Debian Linux Version 12.0

Istio ≫ Istio Version < 1.29.9

Istio ≫ Istio Version >= 1.30.0 < 1.30.6

Istio ≫ Istio Version >= 1.31.0 < 1.31.2

Anthropic ≫ Bun Version < 1.4.4

Envoyproxy ≫ Envoy Version < 1.37.8

Envoyproxy ≫ Envoy Version >= 1.38.0 < 1.38.6

Envoyproxy ≫ Envoy Version >= 1.39.0 < 1.39.3

Tianocore ≫ Edk2 Version <= 202608

Google ≫ Woff2 Version -

Duckdb ≫ Duckdb Version <= 2.0.0

Clickhouse ≫ Clickhouse Version <= 26.10.2.103

Apache ≫ Arrow Version <= 26.0.0

Apache ≫ Arrow Version 27.0.0 Update dev

Mcmilk ≫ 7-zip-zstd Version <= 26.02-1.5.7-r2

7-zip ≫ P7zip Version <= 16.02

Andybalholm ≫ Brotli SwPlatform go Version < 1.2.7

Siemens ≫ Ruggedcom Ape1808 Firmware Version -

Siemens ≫ Ruggedcom Ape1808 Version -

Siemens ≫ Common Configurator Version -

Siemens ≫ Data Flow Monitoring Version -

Siemens ≫ Edge Opc Ua Server Configurator Version -

Siemens ≫ Flow Creator Configurator Version -

Siemens ≫ Industrial Edge Cloud Connector Configurator Version -

Siemens ≫ Industrial Edge Databus Configurator Version -

Siemens ≫ Industrial Edge Hub Version -

Siemens ≫ Industrial Edge Management Cloud Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

27.10.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Google Brotli Unchecked Return Value Vulnerability

Schwachstelle

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Beschreibung

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.71%	0.531

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cve-coordination@google.com	9.2	0	0	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-252 Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.