CyberRota Analysis
AI-GeneratedAn out-of-bounds read vulnerability in the schema lexer of flatcc can lead to a one-byte heap buffer over-read when processing a specifically crafted FlatBuffers schema that ends with a digit. This flaw may cause application crashes, resulting in denial of service. Developers and organizations utilizing flatcc should prioritize addressing this vulnerability to prevent potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex() advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema can trigger a one-byte heap buffer over-read, resulting in application crash and denial of service.