CVE-2026-104845 | lxsmnsyc Seroval up to 1.6.2 Deserialization deserializeTypedArray byteLength allocation of resources

October 2, 2026 Yanac

A vulnerability was found in lxsmnsyc Seroval up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is the function deserializeTypedArray of the component Deserialization. The manipulation of the argument byteLength results in allocation of resources.

This vulnerability is known as CVE-2026-104845. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More