zserio vulnerabilities

2 known vulnerabilities in zserio from Ndsev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  zserio: Integer Overflow or Wraparound

  CVE-2026-33666Apr 24, 2026Ndsev

  Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setBitPosition() bounds check receives the overflowed value and is completely bypass

• 7.5 High severity

  zserio: Memory Allocation with Excessive Size Value

  CVE-2026-33524Apr 24, 2026Ndsev

  Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, a crafted payload as small as 4-5 bytes can force memory allocations of up to 16 GB, crashing any process with an OOM error (Denial of Se