A vulnerability in Zserio, a framework for serializing structured data, allows for a segmentation fault due to a bounds check bypass in the BitStreamReader.h readBytes() / readString() functions. This issue is fixed in version 2.18.1. The vulnerability can cause a segmentation fault when reading beyond the buffer length, and defenders should prioritize verifying and upgrading to Zserio version 2.18.1 or l [truncated]
A crafted payload can cause a Denial of Service (OOM error) in Zserio versions prior to 2.18.1. This vulnerability allows an attacker to crash any process with an OOM error by forcing memory allocations of up to 16 GB with a payload as small as 4-5 bytes. Defenders should assess exposure and verify versions to mitigate potential impacts. The CVE record and NVD entry provide details on the vulnerability an [truncated]
