Microsoft patches critical Brotli buffer overflow in .NET
What happened.Microsoft issued emergency out-of-band updates across supported .NET versions to address a critical buffer overflow vulnerability in the bundled Google Brotli compression decoder.
Why it matters.Modern web microservices depend on automated content encoding to compress outbound traffic and reduce transport costs. When decompression libraries fail during streaming parsing, unauthenticated network traffic can compromise core web application runtimes before perimeter authorization rules execute. Engineering teams must deploy runtime updates immediately and audit edge proxies for malformed Brotli payloads.
