Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readString(), the setBitPosition() bounds check receives the overflowed value and is completely bypassed. The code then reads len bytes (512 MB) from a buffer that is only a few bytes long, causing a segmentation fault. This vulnerability is fixed in 2.18.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-24 | 1 | General1 |
| 2026-04-25 | 1 | Disclosure1 |
| 2026-04-29 | 1 | Patch1 |
CVE-2026-33666 Buffer Overflow in Zserio BitStreamReader Prior to Version 2.18.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33666
Post summary
The entry discloses a Buffer Overflow vulnerability (CVE‑2026‑33666) in Zserio BitStreamReader versions before 2.18.1, providing only technical details without PoC or exploitation evidence.
NDS の中核シリアライザ zserio に脆弱性 2 件を報告し、CVE-2026-33524 / CVE-2026-33666 として公開されました（修正済）。NDS はトヨタ・BMW・ベンツなど世界 43 社の OEM が採用しています。 https://yasu-home.com/cve-2026-33524-zserio-vulnerability-explainer/
Post summary
The NDS zserio serializer has two vulnerabilities (CVE-2026-33524 / CVE-2026-33666) that have been fixed, with an explanatory link provided.
CVE-2026-33666 Zserio is a framework for serializing structured data with a compact and efficient way with low overhead. Prior to 2.18.1, in BitStreamReader.h readBytes() / readStri… https://www.cve.org/CVERecord?id=CVE-2026-33666
Post summary
The post merely references CVE‑2026‑33666 and links to the CVE record, without providing additional details or indicators of exploitation or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nds-association | zserio | - | - | - |