Threats tagged 'ghsa-cwq5-8pvq-j65j'

CVE-2026-33524 is a high-severity vulnerability in the Zserio Runtime serialization framework affecting versions prior to 2.18.1. It allows an attacker to trigger unbounded memory allocation via crafted payloads, potentially causing denial of service by crashing processes due to out-of-memory errors. This impacts both C++ and Java runtimes used in automotive systems, including the Navigation Data Standard (NDS) deployed in millions of vehicles. A patch is available in version 2.18.1.