Skip to content
OpenAdvisories

Package · Maven

io.github.ndsev:zserio-runtime

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Zserio: Integer Overflow in BitStreamReader and Unbounded Memory Allocation in Deserialization

    Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, a crafted payload as small as 4-5 bytes can force memory allocations of up to 16 GB, crashing any process with an OOM error (Denial of S…