CyberRota Analysis
AI-GeneratedAn out-of-bounds read vulnerability in the schema lexer of flatcc can be exploited when a FlatBuffers schema ends with an unterminated quotation mark, leading to a one-byte heap buffer over-read. This flaw may result in application crashes and denial of service. Developers and organizations utilizing flatcc should prioritize addressing this vulnerability to mitigate potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex() dereferences the input pointer after it has reached the end of the buffer. A specially crafted schema can trigger a one-byte heap buffer over-read, resulting in application crash and denial of service.