Uzha
Sign in
← Today's brief

Security · Updated 24 Oct, 04:39 pm IST

Memory‑corruption bug in Brotli decoder affects Bun, Python packages and Envoy

Image: The Hacker News

Why it matters for readers: It shows that even common compression libraries can have serious bugs that affect many apps and servers.

  • The flaw is in Google's Brotli decoder and is tracked as CVE-2026-111497.1
  • It allows crafted Brotli‑compressed data to overwrite past the end of a buffer and corrupt program memory.1
  • Widely used software that unpacks Brotli data is affected, including Bun and Python Brotli and brotlicffi packages.1
  • Envoy proxies set up to decompress Brotli are also impacted by the vulnerability.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started