CVE-2022-44315

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44317

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...

CVE-2022-44315

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44313

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44312

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator...

CVE-2022-44319

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44316

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from the inclusion of a heap buffer overflow in the ExpressionCoerceInteger function in expression.c. The vulnerability is caused by the inclusion of a heap buffer overflow in the...

CVE-2022-44320

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44320

PicoC 3.2.2 contains a heap buffer overflow in the ExpressionCoerceFP function (expression.c) when called from ExpressionParseFunctionCall. Root cause: overflow in heap handling within the interpreter’s expression parsing. Reported impact includes availability impact (possible crash) with CVSS: L...

PT-2022-27183 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects the PicoC compiler. Recommendations: For PicoC version...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the ExpressionAssign function in expression.c when ExpressionParseFunctionCall is called...

CVE-2022-44314

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall...

PT-2022-27177 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall. Recommendations: For PicoC version 3.2.2, at the moment, ther...

CVE-2022-44318

CVE-2022-44318 affects PicoC 3.2.2, with a heap buffer overflow in the StringStrcat function (stdlib/string.c) when invoked via ExpressionParseFunctionCall. Root cause: improper handling during string concatenation leading to a heap overflow. Impact stated as availability-related (HIGH) in CVSS d...

CVE-2022-44314

PicoC 3.2.2 contains a heap buffer overflow in StringStrncpy in cstdlib/string.c when invoked via ExpressionParseFunctionCall. Descriptions across multiple sources indicate this boundary/overflow can be triggered by processing untrusted input, with the consequence described as a denial of service...

CVE-2022-44314

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44319

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44315

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...

PT-2022-27185 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the LexSkipComment function in lex.c when called from LexScanGetToken, which can lead to a potential issue. Recommendations: For PicoC version 3.2.2, consider disabling...