[ CVE-2026-116734 · Published 26 Oct 2026 ]
Vulnerability in dvidelabs flatcc
CVSS 3.7
EPSS <1%No fix listed yet
[ Description ]Official description
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the buffer and crashing the process.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.