CVE-2020-8927

MEDIUM

Integer overflow in the bundled Brotli C library

Published May 24, 2022Updated February 4, 2026Source: osv

Summary

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

Remediation

Upgrade to the fixed version using your package manager.

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.win-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.win-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.win-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.win-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.browser-wasm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.browser-wasm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64 --version 6.0.3

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (147)

Package	Ecosystem	Affected	Fixed In
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.osx-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.browser-wasm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-120
Buffer Copy Without Checking SizeMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 6.5 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

Frequently Asked Questions

What is CVE-2020-8927?: Integer overflow in the bundled Brotli C library This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 6.5/10).
How do I check if my project is affected by CVE-2020-8927?: CVE-2020-8927 affects Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm and Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 (and 113 more). Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2020-8927 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

6.5

Exploitation requires specific conditions or has limited impact. Remediate within weeks.

Also Known As

GHSA-5v8v-66v8-mwm7

BIT-brotli-2020-8927

BIT-dotnet-2020-8927

BIT-dotnet-sdk-2020-8927

BIT-powershell-2020-8927

CVE-2020-36846

GO-2025-3726

PYSEC-2020-29

RUSTSEC-2021-0131

RUSTSEC-2021-0132

Related CVEs

CVE-2026-71437
MEDIUM
Mermaid Architecture diagrams are vulnerable to prototype pollution
CVE-2026-65602
MEDIUM
Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
CVE-2026-54765
MEDIUM
Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port
CVE-2026-62909
MEDIUM
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
CVE-2026-62902
MEDIUM
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
CVE-2022-24512
MEDIUM
.NET Remote Code Execution Vulnerability
CVE-2026-61807
MEDIUM
Snipe-IT: Stored DOM XSS via table selected-count IDs
CVE-2026-62899
MEDIUM
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies