Skip to content
OpenAdvisories
Medium USN-4568-1 1 CVE

brotli vulnerability

Published Oct 5, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Brotli incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS brotli 1.0.3-1ubuntu1~16.04.2
Ubuntu · 18.04 LTS 18.04:LTS brotli 1.0.3-1ubuntu1.3
Ubuntu · 20.04 LTS 20.04:LTS brotli 1.0.7-6ubuntu0.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-8927 Public exploit

    Buffer overflow in Brotli library

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…

    Google Brotli brotli brotli Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2020-8927