SZB-8202811779
Brotli bug reportedly exploited in the wild after public PoC release
- Status
- Corroborated, not yet confirmed by the vendor
- Kind
- Vulnerability
- Vendor
- Brotli
- Product
- Brotli compression library
- First seen
Summary
A Brotli compression library bug is reported as exploited in the wild after a proof-of-concept was released on Monday, according to a post by Catalin Cimpanu linking to a CISA page and other sources. The item does not give affected versions, and the exploitation claim is not confirmed in the text itself.
If you use Brotli
Identify systems and applications that bundle or depend on Brotli
Apply vendor patches as soon as they are available
Monitor the CISA KEV catalog and vendor security advisories
Review systems that decompress untrusted input for signs of compromise
What the sources say 1
· Catalin Cimpanu on Bluesky: “Brotli bug is now exploited in the wild after a PoC was released on Monday” Source