https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:01:14 +0000 https://cve.radiocsirt.org/vuln/brew-exiftool-cve-2020-36846 <p><strong>Affected:</strong> Homebrew: exiftool</p> <p>A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> <p><strong>Affected:</strong> Homebrew: exiftool</p> <p>A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> https://cve.radiocsirt.org/vuln/brew-exiftool-cve-2020-36846 https://cve.radiocsirt.org/vuln/euvd-2026-242272 EUVD-2026-242272 https://cve.radiocsirt.org/vuln/euvd-2026-242272 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36846 <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36846 https://cve.radiocsirt.org/vuln/ghsa-44qx-v2f9-7rq9 <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> https://cve.radiocsirt.org/vuln/ghsa-44qx-v2f9-7rq9 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15225-1 <p>govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15225-1 https://cve.radiocsirt.org/vuln/rustsec-2021-0132 <p><strong>Affected:</strong> crates.io: compu-brotli-sys</p> <p>A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB.</p> <p>If one cannot update the C library, its authors recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> <p><strong>Affected:</strong> crates.io: compu-brotli-sys</p> <p>A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB.</p> <p>If one cannot update the C library, its authors recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0132 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36846 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libio-compress-brotli-perl, Ubuntu:25.10: libio-compress-brotli-perl, Ubuntu:26.04:LTS: libio-compress-brotli-perl</p> <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libio-compress-brotli-perl, Ubuntu:25.10: libio-compress-brotli-perl, Ubuntu:26.04:LTS: libio-compress-brotli-perl</p> <p>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a &#34;one-shot&#34; decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the &#34;streaming&#34; API as opposed to the &#34;one-shot&#34; API, and impose chunk size limits.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36846