CVE-2022-44320

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44316

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken...

CVE-2022-44315

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...

PT-2022-27180 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the LexGetStringConstant function in lex.c when called from LexScanGetToken. This issue affects PicoC. Recommendations: For PicoC version 3.2.2, consider disabling the...

CVE-2022-44321

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken...

CVE-2022-44317

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44314

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44312

CVE-2022-44312 affects PicoC version 3.2.2, with a heap buffer overflow in the ExpressionCoerceInteger function (expression.c) when invoked via ExpressionInfixOperator. The issue is documented across multiple sources and has a CVSSv3.1 base score of 5.5 (Medium, Local, Availability impact). A pat...

CVE-2022-44320

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer overflow vulnerability exists in PicoC version 3.2.2, which stems from a boundary error in the StringStrncpy function in cstdlib/string.c when ExpressionParseFunctionCall is called while processing untrusted input. An attacker can exploit the...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the StdioBasePrintf function in cstdlib/string.c when ExpressionParseFunctionCall is called...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the StringStrcat function in cstdlib/string.c when ExpressionParseFunctionCall is called...

PT-2022-27183 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects the PicoC compiler. Recommendations: For PicoC version...

PT-2022-27177 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall. Recommendations: For PicoC version 3.2.2, at the moment, ther...

CVE-2022-44318

CVE-2022-44318 affects PicoC 3.2.2, with a heap buffer overflow in the StringStrcat function (stdlib/string.c) when invoked via ExpressionParseFunctionCall. Root cause: improper handling during string concatenation leading to a heap overflow. Impact stated as availability-related (HIGH) in CVSS d...

PT-2022-27185 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the LexSkipComment function in lex.c when called from LexScanGetToken, which can lead to a potential issue. Recommendations: For PicoC version 3.2.2, consider disabling...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the ExpressionAssign function in expression.c when ExpressionParseFunctionCall is called...

CVE-2022-44321

The CVE-2022-44321 entry covers a heap buffer overflow in PicoC 3.2.2, occurring in LexSkipComment (lex.c) when invoked via LexScanGetToken. This is a local issue (AV:L, AC:L, PR:N, UI:R) with a Medium base score (5.5) and Availability impact listed as High; exploitation status is not provided in...

CVE-2022-44317

CVE-2022-44317 affects PicoC 3.2.2. A heap buffer overflow occurs in the StdioOutPutc function in stdlib/stdio.c when called from ExpressionParseFunctionCall. CVSS metrics in the initial record show a base score of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, no privileges requir...