CVE-2026-116734 is a vulnerability in flatcc through 0.6.4, where an out-of-bounds read can occur via the verifier check_header function due to an integer overflow. This issue arises from a dead code overflow guard in the FlatBuffers verifier. On 32-bit builds, a crafted buffer offset can wrap the bounds check, leading to a process crash. The CVE record was published on 2026-10-26T21:52:34.998Z and was la [truncated]
A PatchSiren debrief of CVE-2026-116733, an out-of-bounds read vulnerability in flatcc through 0.6.4. The vulnerability allows attackers to read past the input buffer via numbers ending in a decimal point, potentially causing crashes and information disclosure. Defenders should assess exposure and prioritize patching to prevent potential crashes and information disclosure. The CVE record and source item p [truncated]
