Woff2 (Google) - vulnerabilities (CVEs)

1 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Google.

CVEs of Woff2

• CVE-2026-111497 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…