Python 库 brotlicffi 1.0.3 < 1.2.1.0 越界写入 (Brotli2Shell)

critical Nessus 插件 ID 372407

版本 1.2

Oct 28, 2026, 2:45 AM

  • CISA reference
  • CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True")
  • Exploit attributes ("Exploitability ease" set to "Exploits are available")

Plugin Feed: 202610280245