CLEANSTART-2026-AG75681: buffer overflow vulnerability in the Brotli decoder (c/dec/decode
Published Nov 12, 2026
·Updated
Security vulnerability affects the tempo package. A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.
Affected Software
1 affected componentFixes available
cleanstart/tempo<2.10.10-r1
2.10.10-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/tempoto a version that resolves this vulnerability.Fixed in 2.10.10-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vulnerability is rated as remotely exploitable over the network with low attack complexity. It requires no privileges and no user interaction.
2
What could a successful exploit allow?
The reported impact includes high compromise of confidentiality, integrity, and availability.
3
Which software should be investigated?
The advisory identifies the cleanstart/tempo software package as affected. No affected or fixed version information is provided.