CVE-2022-44318

CVE-2022-44318 の説明 PicoC バージョン 3.2.2 には、ExpressionParseFunctionCall から呼び出された際に cstdlib/string.c の StringStrcat 関数でヒープバッファオーバーフローが発生することが判明しています。Picoc を使用するすべてのプロジェクトやライブラリもこの問題の影響を受けます。その一例として picoc-js が挙げられます。 環境のセットアップ PicoC のヒープオーバーフローの脆弱性を再現するには、まず脆弱なバージョン v3.2.2 の PicoC...

EUVD-2022-47263

Malicious code in bioql PyPI...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

Heap overflow

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

PT-2022-27182 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects PicoC and is related to the StringStrcat function, which ...

CVE-2022-44318

CVE-2022-44318 affects PicoC 3.2.2, with a heap buffer overflow in the StringStrcat function (stdlib/string.c) when invoked via ExpressionParseFunctionCall. Root cause: improper handling during string concatenation leading to a heap overflow. Impact stated as availability-related (HIGH) in CVSS d...