A flawed check in Brotli’s decompression code lets a crafted compressed stream corrupt decoder memory, with no login needed, potentially exposing data, crashing the process, or running attacker code.
Posts tagged: Google
Google Pixel Improper Authorization Vulnerability
A logic flaw in the Pixel cellular modem lets someone with radio-level proximity bypass permission checks and escalate privileges without any user interaction, and it’s already being exploited.
Google Chromium V8 Out of Bounds Write Vulnerability
A V8 engine flaw lets a malicious web page run code inside Chrome’s sandbox with no login or download needed, and it’s already being exploited in the wild.