CVE-2026-90784: Dvidelabs flatcc semantics.c fb_clear_parser memory leak
A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fbclearparser of the file src/Compiler/semantics.c. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 8dbc3419738da066151991fd2bf1d0c85591dea2. It is suggested to install a patch to address this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dvidelabs flatccto a version that resolves this vulnerability.Fixed in 0.6.3Patch 8dbc3419738da066151991fd2bf1d0c85591dea2
Event History
Frequently Asked Questions
Which installations should be treated as affected?
Dvidelabs flatcc versions up to and including 0.6.3 are affected.
What does an attacker need to exploit this issue?
The issue can be initiated remotely and requires neither authentication nor user interaction. Public exploit information has been disclosed.
What is the expected impact and remediation?
Successful exploitation causes a memory leak and has a low availability impact. Install the patch identified as 8dbc3419738da066151991fd2bf1d0c85591dea2.