CVE-2026-90784
Dvidelabs flatcc semantics.c fb_clear_parser memory leak
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 14, 2026
- Updated
- Sep 14, 2026
- Reserved
- Sep 13, 2026
Description
A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb_clear_parser of the file src/Compiler/semantics.c. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 8dbc3419738da066151991fd2bf1d0c85591dea2. It is suggested to install a patch to address this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
flatccDvidelabs |
|
References
- VDB-403290 | Dvidelabs flatcc semantics.c fb_clear_parser memory leakvdb-entrytechnical-description
- VDB-403290 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-90784 | CVE Analysis and Reportthird-party-advisory
- Submit #919199 | dvidelabs flatcc v0.6.3 Memory Leakthird-party-advisory
- https://github.com/dvidelabs/flatcc/issues/389exploitissue-tracking
- https://github.com/dvidelabs/flatcc/commit/8dbc3419738da066151991fd2bf1d0c85591dea2patch
- https://github.com/dvidelabs/flatcc/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.