Summary
Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.
Security Fix(es):
* brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | brotli | 1.0.9-10.el9_8.1 |
| AlmaLinux · 9 | brotli-devel | 1.0.9-10.el9_8.1 |
| AlmaLinux · 9 | libbrotli | 1.0.9-10.el9_8.1 |
| AlmaLinux · 9 | python3-brotli | 1.0.9-10.el9_8.1 |
Vulnerabilities 1
-
Critical 9.2
Out-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …
KEV Oct 27, 2026