Google Brotli

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-1114971.0.3 – < 1.0.10 ; 1.1.0 – < 1.1.1 ; 1.2.0 – < 1.2.1Out-of-Bounds Write in Google Brotli DecoderCRITICAL 9.283 %KEV