AI × AEC · CURATED INSIGHT

Google Brotli Flaw Triggers Security Patches Across .NET, PHP, and Linux

Prepared by FBI SIcenter · Published on this site 2026-10-28 · Source date 2026-10-28

Google's Brotli library contains an out-of-bounds write flaw, CVE-2026-111497, causing potential DoS or data leakage. Microsoft patched .NET 8.0.33 and others, while PHP and Linux distributions rolled out fixes.

Google Brotli Flaw Triggers Security Patches Across .NET, PHP, and Linux — AI-generated concept illustration; not an event photograph.

An out-of-bounds write vulnerability, CVE-2026-111497, was found in Google's Brotli compression library. Following Node.js updates, Microsoft patched .NET versions including .NET 8.0.33, 9.0.22, 10.0.14, and 11 RC3 on October 25. PHP and Linux distributions are releasing updates. Research indicates the flaw also impacts non-HTTP data processing and image decoding.

Key takeaways

Microsoft patched versions including .NET 8.0.33, PHP updated Windows builds, and multiple Linux distributions released fixes.
JFrog demonstrated that the vulnerability can also trigger crashes or high CPU usage in non-HTTP workflows like image decoding and PyArrow processing.

Source：iThome Read the original ↗

Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.

Open in the reader to save or discuss ↗