Abstract
None of QSAN's products are affected by CVE-2026-111497.
CVE-2026-111497 is a buffer overflow vulnerability in the Google Brotli decoder (versions 1.0.3 through 1.2.0). QSAN has reviewed its QSM and XEVO firmware and determined that QSAN products are not affected by this vulnerability.
Applied to
Mitigation
None.
Detail
CVE-2026-111497
Severity: Not affected
CVSS3 Base Score: 0.0
CVSS3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.