https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:54:00.177510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33666 CVE-2026-33666 — Zserio: Integer Overflow in BitStreamReader on 32-bit platforms 2026-10-12T23:54:00.192552+00:00

Affected: ndsev zserio

Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setBitPosition() bounds check receives the overflowed value and is completely bypassed. The code then reads len bytes (512 MB) from a buffer that is only a few bytes long, causing a segmentation fault. This vulnerability is fixed in 2.18.1.