CVE-2026-116733
flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number
dvidelabs flatcc
CVSS
6.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a decimal point. Attackers can supply untrusted JSON ending immediately after a decimal point to generated parsers, crashing applications when the buffer ends at an unmapped page.
Text from CVE List
Affected versions 1
- flatccaffected: all versions through 0.6.4CVE List
References 5
- github.com/dvidelabs/flatcc/commit/356792dc155a9e685acdfe0ec1e209bdadcb4ab9Fixvia CVE List
- hackmd.io/@haindpwn/flatcc-json-number-oob-readAdvisoryvia CVE List
- vulncheck.com/advisories/flatcc-through-0.6.4-out-of-bounds-read-via-flatcc-json-parser-numberAdvisoryvia CVE List
- github.com/dvidelabs/flatccReferencevia CVE List
- github.com/dvidelabs/flatcc/blob/v0.6.4/src/runtime/json_parser.c#L539-L543Referencevia CVE List