EUVD-2026-110482

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734 flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734 flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734 flatcc through 0.6.4 Out-of-Bounds Read via verifier check_header

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734

flatcc through 0.6.4 contains an integer overflow vulnerability in the checkheader function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit builds, attackers can supply a crafted buffer offset that wraps the bounds check, causing an out-of-bounds read before the...

CVE-2026-116734

The flatcc library, versions through 0.6.4 , contains an integer overflow vulnerability within the check_header function of the FlatBuffers verifier. The root cause is that the overflow guard is dead code . On 32-bit builds , an attacker can provide a crafted buffer offset that wraps the bounds c...

dvidelabs FlatCC digital error vulnerability

dvidelabs FlatCC versions 0.6.4 and earlier contain a numeric error vulnerability. This vulnerability stems from an integer overflow in the checkheader function within FlatBuffers’ validators; the overflow is protected by dead code. In 32-bit builds, attackers can supply a specially crafted buffe...

AZL-98490 CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-73812

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-73812

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-73812: Inconsistent Interpretation of HTTP Requests

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...