Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-82059
HistoryNov 10, 2022 - 12:00 a.m.

PicoC StringStrncpy function buffer overflow vulnerability

2022-11-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
picoc
buffer overflow
stringstrncpy
vulnerability
denial of service
boundary error
untrusted input
cstdlib
version 3.2.2

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

PicoC is a lightweight C interpreter. A buffer overflow vulnerability exists in PicoC version 3.2.2, which stems from a boundary error in the StringStrncpy function in cstdlib/string.c when ExpressionParseFunctionCall is called while processing untrusted input. An attacker can exploit the vulnerability to cause a denial of service to the program.

CPENameOperatorVersion
picoc picoceq3.2.2

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

Related for CNVD-2023-82059