Known vulnerabilities in brotli (Red Hat package)

Vendor: Red Hat Inc.
Software: brotli (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:brotli_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting brotli (Red Hat package) brotli (Red Hat package) is affected by 4 known vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157671 - Out-of-bounds write
CVE-2026-111497		 CWE-787 High
No
Exploited
 1.0.6-5.el8_10, 1.0.9-6.el9_2.3, 1.0.9-10.el9_8.1, 1.1.0-8.el10_2.1 26.10.2026 SB2026102621
SB2026102622
SB2026102623
and 15 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 1.0.9-6.el9_2.3 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 90 more
#VU118560 - Resource exhaustion
CVE-2025-6176		 CWE-400 Medium
No
No
 1.0.6-1.el8_2.1, 1.0.6-4.el8_4, 1.0.6-4.el8_6, 1.0.6-4.el8_8, 1.0.6-4.el8_10, 1.0.9-6.el9_0.1, 1.0.9-6.el9_4.1, 1.0.9-9.el9_7, 1.1.0-6.el10_0.1, 1.1.0-7.el10_1 17.11.2025 SB2025111748
SB2025111750
SB2025111755
and 28 more
#VU46905 - Buffer overflow
CVE-2020-8927		 CWE-120 Medium
No
No
 1.0.6-3.el8 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more