CVE-2026-116733

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5

Description An out-of-bounds read occurs in the flatcc json parser number() function when processing numbers that end with a decimal point. An attacker can provide untrusted JSON data that terminates immediately after a decimal point, causing the parser to read past the input buffer. This can lead to application crashes if the buffer ends at an unmapped page.

Recommendations Update to a version newer than 0.6.4.