flatcc vulnerabilities
CVEs whose affected-version data names the flatcc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-116734Low· 3.7flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps t…
CVE-2026-116733Low· 3.7flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number
flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a decimal point. Attackers can supply untrusted JSON ending immedi…
CVE-2026-90786Medium· 5.3PoCA vulnerability was determined in Dvidelabs flatcc up to 0.6.3
A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. T…
CVE-2026-90785Medium· 5.3PoCA vulnerability was found in Dvidelabs flatcc up to 0.6.3
A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to…
CVE-2026-90784Medium· 5.3PoCA vulnerability has been found in Dvidelabs flatcc up to 0.6.3
A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb_clear_parser of the file src/Compiler/semantics.c. The manipulation leads to memory leak. It is possible to initiate the attack remot…