<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 10 Nov 2026 18:06:29 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder</title>
      <link>https://db.gcve.eu/vuln/cve-2026-111497</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Google Brotli, Siemens Calibre, Siemens Calibre ICE, Siemens Capital, Siemens Cloud Connector Configurator, Siemens Common Configurator (CC on IEM), Siemens Common Configurator on Device (CC on Edge), Siemens COMOS Walkinside, Siemens Data Flow Monitoring, Siemens Databus Configurator and 66 more&lt;/p&gt;
&lt;p&gt;A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.&lt;/p&gt;
&lt;p&gt;Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Google Brotli, Siemens Calibre, Siemens Calibre ICE, Siemens Capital, Siemens Cloud Connector Configurator, Siemens Common Configurator (CC on IEM), Siemens Common Configurator on Device (CC on Edge), Siemens COMOS Walkinside, Siemens Data Flow Monitoring, Siemens Databus Configurator and 66 more&lt;/p&gt;
&lt;p&gt;A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.&lt;/p&gt;
&lt;p&gt;Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-111497</guid>
    </item>
  </channel>
</rss>
