CVE-2026-116734
flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the buffer and crashing the process.
| CWE | CWE-190 |
| Vendor | dvidelabs |
| Product | flatcc |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for dvidelabs flatcc
Be the first to know when new low vulnerabilities affecting dvidelabs flatcc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
dvidelabs / flatcc
0 ≤ 0.6.4
References
github.com: https://github.com/dvidelabs/flatcc/commit/0df9c097a19badc8bd22d93af8fd47bd291e5d9f github.com: https://github.com/dvidelabs/flatcc github.com: https://github.com/dvidelabs/flatcc/blob/v0.6.4/src/runtime/verifier.c#L126-L137 hackmd.io: https://hackmd.io/@haindpwn/flatcc-json-number-oob-read vulncheck.com: https://www.vulncheck.com/advisories/flatcc-through-0.6.4-out-of-bounds-read-via-verifier-check-header
Credits
HaiND from the Post and Telecommunication Institute of Technology mikkelfj