CVE-2026-90785Medium· 5.3▾ TwilightPoC availableA vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Exploit / PoC code exists
0.4% → 0.7%
A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f705032346ee39efd7d3848c50b73d455d28d06d. A patch should be applied to remediate this issue.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-90786Medium· 5.3A vulnerability was determined in Dvidelabs flatcc up to 0.6.3
CVE-2026-90784Medium· 5.3A vulnerability has been found in Dvidelabs flatcc up to 0.6.3
CVE-2026-116734Low· 3.7flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header
CVE-2026-116733Low· 3.7flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number
CVE-2026-89098Medium· 5.5Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd
CVE-2026-4046High· 7.5iconv crash due to assertion failure with untrusted input