Google Brotli 1.0.1

CPE Details

Google Brotli 1.0.1
google
brotli
1.0.1
2020-09-15
18h26 +00:00
2020-09-15
18h26 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:google:brotli:1.0.1:*:*:*:*:*:*:*

Informations

Vendor

google

Product

brotli

Version

1.0.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-8927 2020-09-15 07h15 +00:00 A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.
6.5
Medium