CVE-2026-33666

{
  "id": "CVE-2026-33666",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-24T19:17:10.147",
  "lastModified": "2026-10-26T00:10:00.150",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setBitPosition() bounds check receives the overflowed value and is completely bypassed. The code then reads len bytes (512 MB) from a buffer that is only a few bytes long, causing a segmentation fault. This vulnerability is fixed in 2.18.1."
    },
    {
      "lang": "es",
      "value": "Zserio es un framework para serializar datos estructurados de una manera compacta y eficiente con baja sobrecarga. Antes de la versión 2.18.1, en BitStreamReader.h readBytes() / readString(), la comprobación de límites de setBitPosition() recibe el valor desbordado y es completamente eludida. El código luego lee len bytes (512 MB) de un búfer que tiene solo unos pocos bytes de longitud, causando un fallo de segmentación. Esta vulnerabilidad está corregida en la versión 2.18.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "ndsev",
          "product": "zserio",
          "versions": [
            {
              "version": "<= 2.15.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-27T13:45:58.519906Z",
          "id": "CVE-2026-33666",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nds-association:zserio:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2.18.1",
              "matchCriteriaId": "5488B9D1-04B2-459B-BE23-2FF4A91D12CF"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/ndsev/zserio/security/advisories/GHSA-fjwv-6wcr-vqwj",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Mitigation",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://github.com/ndsev/zserio/security/advisories/GHSA-fjwv-6wcr-vqwj",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Mitigation",
        "Vendor Advisory"
      ]
    }
  ]
}