CVE-2026-116734

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5

Description An integer overflow exists in the check header() function of the FlatBuffers verifier due to an overflow guard that acts as dead code. On 32-bit builds, an attacker can provide a crafted buffer offset that bypasses the bounds check, leading to an out-of-bounds read before the buffer and resulting in a process crash.

Recommendations Update to a version newer than 0.6.4. As a temporary mitigation, restrict the use of the check header() function in 32-bit environments.