116 matches found
CVE-2022-44317
CVE-2022-44317 affects PicoC 3.2.2. A heap buffer overflow occurs in the StdioOutPutc function in stdlib/stdio.c when called from ExpressionParseFunctionCall. CVSS metrics in the initial record show a base score of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, no privileges requir...
CVE-2022-44314
PicoC 3.2.2 contains a heap buffer overflow in StringStrncpy in cstdlib/string.c when invoked via ExpressionParseFunctionCall. Descriptions across multiple sources indicate this boundary/overflow can be triggered by processing untrusted input, with the consequence described as a denial of service...
CVE-2022-44318
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...
PT-2022-27176 · Picoc · Picoc
Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator, which can be exploited. Recommendations: For PicoC version 3.2.2, conside...
PT-2022-27182 · Picoc · Picoc
Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects PicoC and is related to the StringStrcat function, which ...
CVE-2022-44318
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...
CVE-2022-44316
PicoC 3.2.2 is affected by a heap buffer overflow in LexGetStringConstant (lex.c) when invoked via LexScanGetToken. This CVE (CVE-2022-44316) is documented across multiple sources (NVD, Red Hat, OSV, CNNVD, etc.). The issue arises within the LexGetStringConstant routine and results in a high impa...
CVE-2022-44314
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall...
CVE-2022-44316
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken...
CVE-2022-44315
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...
CVE-2022-44317
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...
CVE-2022-44318
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...
CVE-2022-44314
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall...
CVE-2022-44315
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall...
CVE-2022-44321
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken...
CVE-2022-44312
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator...
CVE-2022-44317
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...
CVE-2022-44313
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall...