Approved changes feed: RSS · Atom

cpe:2.3:a:flatcc_project:flatcc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFlatcc Project (fb2c9e05-f4ef-536f-8369-e27b72e1038b)
ProductFlatcc (b40c1bbe-6b15-5419-9b41-1f66bcbbd60e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116733 vulnerable 2026-11-03 10:15:21.694954 flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_number
LOW (3.7)
flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a decimal point. Attackers can supply untrusted JSON ending immediately after a decimal point to generated parsers, crashing applications when the buffer ends at an unmapped page.
Published: 2026-10-26T21:52:34.304Z
Updated: 2026-11-02T18:26:35.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-116734 vulnerable 2026-11-03 10:15:21.456337 flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header
LOW (3.7)
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the buffer and crashing the process.
Published: 2026-10-26T21:52:34.998Z
Updated: 2026-10-27T14:17:08.680Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.