Affected: Google Brotli, Siemens Cloud Connector Configurator, Siemens Common Configurator (CC on IEM), Siemens Common Configurator on Device (CC on Edge), Siemens Data Flow Monitoring, Siemens Databus Configurator, Siemens DataXess Configurator, Siemens Desigo CC family V8, Siemens Desigo CC family V9, Siemens Edge OPC UA Server Configurator and 14 more

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.