CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

As cited

Copy frozen at 2026-11-01 05:06 UTC (site build).

vulnerabilities

CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

XS::libbrotli, a Perl module, bundles a brotli library with an out-of-bounds write vulnerability in the decoder. The issue affects versions before 1.2.1.0 and has been assigned CVE-2026-115946.

Why it matters: Perl developers and system administrators using XS::libbrotli should upgrade to version 1.2.1.0 or later to prevent potential denial of service or code execution attacks through malformed brotli-compressed data.

Source published

2026-11-01 01:31 UTC

First seen by Cybersecurity Tracker

2026-11-01 04:02 UTC