Affected: Google Brotli, Siemens Heliox Dual Port 60kW, Siemens Heliox Flex Pro, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens VersiCharge AC Series, Siemens VersiCloud, Siemens Cloud Connector Configurator and 9 more

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.