CVE-2022-44314

PicoC 3.2.2 contains a heap buffer overflow in StringStrncpy in cstdlib/string.c when invoked via ExpressionParseFunctionCall. Descriptions across multiple sources indicate this boundary/overflow can be triggered by processing untrusted input, with the consequence described as a denial of service...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

PT-2022-27176 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator, which can be exploited. Recommendations: For PicoC version 3.2.2, conside...

PT-2022-27182 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects PicoC and is related to the StringStrcat function, which ...

CVE-2022-44316

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken...

CVE-2022-44312

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the LexSkipComment function in lex.c when LexScanGetToken is called...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from the inclusion of a heap buffer overflow in the ExpressionCoerceInteger function in expression.c. The vulnerability is caused by the inclusion of a heap buffer overflow in the...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the ExpressionCoerceInteger function in expression.c when ExpressionParseFunctionCall is called...

CVE-2022-44319

PicoC 3.2.2 is affected by a heap buffer overflow in StdioBasePrintf (stdlib/string.c) triggered when called via ExpressionParseFunctionCall. Documented impact and details: CVE-2022-44319 with CVSS v3.1 metrics showing a local attacker can cause high availability impact; base score 5.5 (Medium), ...

CVE-2022-44315

CVE-2022-44315 affects PicoC 3.2.2. The vulnerability is a heap buffer overflow in ExpressionAssign (expression.c) when invoked via ExpressionParseFunctionCall. The provided documents describe the issue’s root cause and affected component but do not provide a patch version or remediation steps. P...

CVE-2022-44316

PicoC 3.2.2 is affected by a heap buffer overflow in LexGetStringConstant (lex.c) when invoked via LexScanGetToken. This CVE (CVE-2022-44316) is documented across multiple sources (NVD, Red Hat, OSV, CNNVD, etc.). The issue arises within the LexGetStringConstant routine and results in a high impa...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer error vulnerability exists in PicoC version 3.2.2, which stems from a heap buffer overflow contained in the ExpressionCoerceFP function in expression.c when ExpressionParseFunctionCall is called...

CVE-2022-44320

PicoC 3.2.2 contains a heap buffer overflow in the ExpressionCoerceFP function (expression.c) when called from ExpressionParseFunctionCall. Root cause: overflow in heap handling within the interpreter’s expression parsing. Reported impact includes availability impact (possible crash) with CVSS: L...

CVE-2022-44315

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44317

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...

CVE-2022-44313

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44321

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44320

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall...