Is CVE-2026-116733 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116733?

CVE-2026-116733 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-116733

Description

flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a decimal point. Attackers can supply untrusted JSON ending immediately after a decimal point to generated parsers, crashing applications when the buffer ends at an unmapped page.