A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion.
The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 8b19ba4e992ebcad7f5970704d1afc5507fa5205.
To fix this issue, it is recommended to deploy a patch.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
dvidelabs:flatcc
References 7
https://vuldb.com/vuln/403292
VDB-403292 | Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion
https://vuldb.com/vuln/403292/cti
VDB-403292 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/cve/CVE-2026-90786
CVE-2026-90786 | CVE Analysis and Report
https://vuldb.com/submit/919201
Submit #919201 | dvidelabs flatcc v0.6.3 Reachable Assertion
https://github.com/dvidelabs/flatcc/issues/387
NVD
https://github.com/jimjag/flatcc/commit/8b19ba4e992ebcad7f5970704d1afc5507fa5205
NVD
https://github.com/dvidelabs/flatcc/
NVD