Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-8927

24
FAUCET Score

CVE-2020-8927 describes a buffer overflow vulnerability in Brotli library versions prior to 1.0.8, affecting products from vendors like Microsoft, Google, and Debian. An unauthenticated attacker can trigger a crash by providing a crafted input length exceeding 2 GiB during "one-shot" decompression. This vulnerability has a medium severity CVSS score of 6.5, indicating low attack complexity and potential for denial of service. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.0.8CPE matchmatch criteria
cpe:2.3:a:google:brotli:*:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
31CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
32CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.3MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.22%
Probability of exploitation in next 30 days
EPSS Percentile
86.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0322 is in the 82nd percentile among its peer group of 23,701 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (164)

microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.1Fixed in: 17.1.4
View patch
microsoftpatch availablevia msrc
Product: PowerShell 7.0Fixed in: 7.0.9
View patch
microsoftpatch availablevia msrc
Product: PowerShell 7.1Fixed in: 7.1.6
View patch
microsoftpatch availablevia msrc
Product: PowerShell 7.2Fixed in: 7.2.2
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.0Fixed in: 17.0.7
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Fixed in: 16.11.11
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)Fixed in: 16.9.18
View patch
microsoftpatch availablevia msrc
Product: .NET Core 3.1Fixed in: 3.1.23
View patch
microsoftpatch availablevia msrc
Product: .NET 5.0Fixed in: 5.0.15
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)Fixed in: 16.7.26
View patch
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-armFixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.osx-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.browser-wasmFixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-armFixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-armFixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.osx-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-armFixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-arm64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x64Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x86Fixed in: 5.0.15
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasmFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasmFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasmFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.browser-wasmFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.linux-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.osx-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.osx-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvos-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.win-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.Mono.win-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.osx-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-armFixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-arm64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x86Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.osx-x64Fixed in: 6.0.3
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-armFixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-arm64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-musl-arm64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.linux-x64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.osx-x64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-armFixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-arm64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x64Fixed in: 3.1.23
nugetpatch availablevia ghsa
Product: Microsoft.NETCore.App.Runtime.win-x86Fixed in: 3.1.23
pippatch availablevia ghsa
Product: brotliFixed in: 1.0.8
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: dotnet3.1-0:3.1.417-1.el8_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: brotli-0:1.0.6-3.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: dotnet5.0-0:5.0.212-1.el8_5
View patch
redhatpatch availablevia redhat_api
Product: .NET Core on Red Hat Enterprise LinuxFixed in: rh-dotnet31-dotnet-0:3.1.417-1.el7_9
View patch
redhatpatch availablevia redhat_api
Product: .NET Core on Red Hat Enterprise LinuxFixed in: rh-dotnet50-dotnet-0:5.0.212-1.el7_9
View patch
rustpatch availablevia ghsa
Product: compu-brotli-sysFixed in: 1.0.9

Vendor Advisories (3)

rustGHSA-5v8v-66v8-mwm7medium

Integer overflow in the bundled Brotli C library

May 24, 2022
microsoft2022-Mar/CVE-2020-8927Important

Brotli Library Buffer Overflow Vulnerability

Mar 8, 2022
redhatCVE-2020-8927Important

brotli: buffer overflow when input chunk is larger than 2GiB

Aug 27, 2020

References

lists.opensuse.org / opensuse-security-announce/2020-09/msg00108.html
Mailing ListThird Party Advisory
github.com / google/brotli/releases/tag/v1.0.9
Release NotesThird Party Advisory
lists.debian.org / debian-lts-announce/2020/12/msg00003.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG
usn.ubuntu.com / 4568-1
Third Party Advisory
debian.org / security/2020/dsa-4801
Third Party Advisory