Threats tagged 'ghsa-ffg2-pv59-mvp5'

flatcc versions up to 0.6.4 have an out-of-bounds read vulnerability in the __flatcc_json_parser_number function. This flaw allows attackers to read beyond the input buffer when parsing JSON numbers that end with a decimal point. Supplying crafted JSON input ending immediately after a decimal point can cause the parser to access unmapped memory, leading to application crashes.