
Brotli CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse, and Arrow
JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.
1
2 stories, newest first · one card per story

JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.
Moderate-severity CVE-2026-92287 hits Parquet decryption users of Arrow C++ and PyArrow; 26.0.0 is unaffected.
Today 840 readers · 1.1K views · 843 reads · all time 159K views