CVE-2026-33491 is a high-severity stack-based buffer overflow vulnerability affecting the Zen C compiler versions prior to 0.4.4. Attackers can trigger this flaw by providing a specially crafted Zen C source file with overly long identifiers, potentially leading to a compiler crash or arbitrary code execution. With a CVSS score of 7.8, exploitation requires local access and user interaction but has low attack complexity, posing a significant risk to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation or public exploit code; however, users should update to Zen C version 0.4.4 or later to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.4.4CPE matchmatch criteria | cpe:2.3:a:zenc-lang:zen_c:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.