<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 02 Nov 2026 08:51:52 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder</title>
      <link>https://db.gcve.eu/vuln/cve-2026-111497</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Google Brotli, Siemens Heliox Dual Port 60kW, Siemens Heliox Flex Pro, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens VersiCharge AC Series, Siemens VersiCloud, Siemens Cloud Connector Configurator and 9 more&lt;/p&gt;
&lt;p&gt;A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.&lt;/p&gt;
&lt;p&gt;Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Google Brotli, Siemens Heliox Dual Port 60kW, Siemens Heliox Flex Pro, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens VersiCharge AC Series, Siemens VersiCloud, Siemens Cloud Connector Configurator and 9 more&lt;/p&gt;
&lt;p&gt;A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.&lt;/p&gt;
&lt;p&gt;Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-111497</guid>
    </item>
  </channel>
</rss>
