Bulletin ID: 2026-155-AWS
Publication Date: 10/28/2026 15:00 PM PDT
Description:
AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process memory in an affected application. AWS Lambda, AWS Amplify, AWS App Runner, Amazon CloudWatch Synthetics, AWS CodeBuild, AWS Elastic Beanstalk, and AWS Elemental MediaLive are addressing this issue. Some services require customer action. For details, see the bulletin.
This article has been indexed from Latest Bulletins
Read the original article:
CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure