UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8927

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to…

Severity
Medium 6.5
Published
27 Aug 2020
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Fixed in
1.0.8
Sources
NVD, releases

Affected software

SoftwareAffected versions
BrotliServers and applications · cpe:a:google:brotli
  • Every version before 1.0.8
.NETServers and applications · cpe:a:microsoft:.net
  • From 5.0 up to 5.0.14
BrotliServers and applications · github-releases:google/brotli
  • Every version before 1.0.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8927
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8927
  • github.com https://github.com/google/brotli/releases/tag/v1.0.8