PT-2026-26794

CVE-2026-33491

Published

2026-03-20

Updated

2026-05-01

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zen C versions prior to 0.4.4

Description A stack-based buffer overflow exists in the Zen C compiler. This issue is due to a flaw in identifier mangling. By supplying a specially crafted Zen C source file (.zc) containing excessively long struct, function, or trait identifiers, an attacker can cause a compiler crash or potentially execute arbitrary code. The vulnerability affects the processing of identifiers within the compiler.

Recommendations Update to Zen C version 0.4.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Thesmartshadow

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow

CWE-787: Out-of-bounds Write