CVE-2026-33524

CVE-2026-33524CVE-2026-33524

nds-association / zserio

Description

Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, a crafted payload as small as 4-5 bytes can force memory allocations of up to 16 GB, crashing any process with an OOM error (Denial of Service). This vulnerability is fixed in 2.18.1.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Last modified2026-10-26
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.