CVE-2026-116734 Details
Description
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the buffer and crashing the process.
A vulnerability in flatcc, a FlatBuffers compiler and runtime library, allows for an integer overflow that bypasses bounds checks in the buffer verifier. This issue is present in flatcc versions through 0.6.4. The vulnerability arises because the overflow guard in the verifier's check_header function is ineffective, particularly on 32-bit builds. Attackers can exploit this by supplying a crafted buffer offset that wraps the bounds check, leading to an out-of-bounds read before the buffer, which can cause a process crash. Additionally, the same version of flatcc contains an out-of-bounds read vulnerability in the JSON parser, creating a memory safety issue.
Users can update to flatcc version 0.6.5 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| flatcc | <= 0.6.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 27, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |