XS::libbrotli before 1.2.1.0 vulnerable to out-of-bounds write (CVE-2026-115946)
Original title: CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with decoder out-of-bounds write vulnerability.
XS::libbrotli for Perl versions before 1.2.1.0 bundle a brotli library. This bundled library contains an out-of-bounds write in the decoder. The advisory notes the issue in the bundled dependency.
- Affected: XS::libbrotli before 1.2.1.0
- Bundles vulnerable brotli library
- Out-of-bounds write in decoder
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-115946 | OOB write in XS::libbrotli bundled brotli before 1.2.1.0 | — | — |
From the original article
Posted by Timothy Legge on Oct 31 ======================================================================== https://metacpan. org/dist/XS-libbrotli XS::libbrotli versions before 1. 2.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.