HighVulnerabilityCVE-2026-115946updated 1 Nov 2026, 01:45 UTC

XS::libbrotli (Perl) before 1.2.1.0: out-of-bounds write in bundled brotli decoder

1 source, unconfirmed

Severity	HighVulnerability
Being exploited?	UnclearNo reports either way yet
Fix available?	UnclearNo fixed version published in the sources yet
How sure is this?	1 source, unconfirmedOnly one publisher so far, details may change

Timeline

1 Nov 2026, 01:31 UTC
Publicly disclosed
1 Nov 2026, 01:31 UTC
Reported by oss-security · oss-security
1 Nov 2026, 01:45 UTC
Picked up by Zero Radar

Sources 1 report, oldest first

Security researchers research teams and mailing lists

CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decodeross-security · 1 Nov 2026, 01:31 UTC

Technical details

ID: CVE-2026-115946
Disclosed: 1 Nov 2026, 01:31 UTC
On Zero Radar: 1 Nov 2026, 01:45 UTC (14 min after disclosure)
Last change: 1 Nov 2026, 01:45 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

XS::libbrotli (Perl) before 1.2.1.0: out-of-bounds write in bundled brotli decoder · Zero Radar