Cyber ·
Brotli decoder flaw in XS::libbrotli
An advisory published on October 31, 2026 reports an out-of-bounds write in the Brotli decoder included in XS::libbrotli for Perl versions earlier than 1.2.1.0.
An advisory published on October 31, 2026 describes CVE-2026-115946: XS::libbrotli for Perl versions earlier than 1.2.1.0 include a Brotli library whose decoder can perform an out-of-bounds write. The supplied material does not state further impact or provide details about exploitation.
Consult the original advisory and distribution records to confirm the scope and fixed version. Organizations using the package should check the installed version and assess upgrading to 1.2.1.0 or later. If using AI to analyze the advisory, avoid submitting unnecessary internal data or identifiers and follow the organization’s data policy.