Skip to content
OpenAdvisories

Vendor

ndsev

2 known vulnerabilities.

Products

zserio 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-33666

    Zserio: Integer Overflow in BitStreamReader on 32-bit platforms

    Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setBitPosition() bounds check receives the overflowed value and is completely bypas…

    ndsev zserio
  • High 7.5
    CVE-2026-33524

    Zserio: Integer Overflow in BitStreamReader and Unbounded Memory Allocation in Deserialization

    Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, a crafted payload as small as 4-5 bytes can force memory allocations of up to 16 GB, crashing any process with an OOM error (Denial of S…

    ndsev zserio io.github.ndsev:zserio-runtime Maven