CVE-2026-90785
Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f705032346ee39efd7d3848c50b73d455d28d06d. A patch should be applied to remediate this issue.
| CWE | CWE-617 |
| Vendor | dvidelabs |
| Product | flatcc |
| Published | Sep 14, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for dvidelabs flatcc
Be the first to know when new medium vulnerabilities affecting dvidelabs flatcc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Dvidelabs / flatcc
0.6.0 0.6.1 0.6.2 0.6.3
References
vuldb.com: https://vuldb.com/vuln/403291 vuldb.com: https://vuldb.com/vuln/403291/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90785 vuldb.com: https://vuldb.com/submit/919200 github.com: https://github.com/dvidelabs/flatcc/issues/388 github.com: https://github.com/dvidelabs/flatcc/commit/f705032346ee39efd7d3848c50b73d455d28d06d github.com: https://github.com/dvidelabs/flatcc/
Credits
🔍 lrrh (VulDB User)