CVE-2026-111497: The Brotli Decoder Bug and How to Check Your Stack

A compression library bug does not sound like a big deal until you count how many programs decompress data they did not ask for. CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, t