CERT24GHSA-9v8h-qqgm-4m35 — Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packageLoading data…
CERT24Threat Observatory
Period

GHSA-9v8h-qqgm-4m35 — Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

A buffer overflow vulnerability exists in the Brotli decoder (c/dec/decode.c) in versions 1.0.3 through 1.2.0 on all platforms. Using a crafted Brotli-compressed stream, a remote unauthenticated attacker may corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code.

← Back to intelligence

GHSA-9v8h-qqgm-4m35 — Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

A buffer overflow vulnerability exists in the Brotli decoder (c/dec/decode.c) in versions 1.0.3 through 1.2.0 on all platforms. Using a crafted Brotli-compressed stream, a remote unauthenticated attacker may corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code.