CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

CVE-2021-32421

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.

CVE-2021-33390

dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.

CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.