Picoc Project

12 CVEs across 1 Picoc Project products. Browse Picoc Project vulnerabilities, severities, and proof-of-concept exploits.

Picoc Project products with known CVEs

ProductCVEs
Picoc12
Picoc Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-44321Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken.
CVE-2022-44320Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctio…
CVE-2022-44319Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFuncti…
CVE-2022-44318Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionC…
CVE-2022-44317Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCa…
CVE-2022-44316Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.
CVE-2022-44315Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionC…
CVE-2022-44314Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunction…
CVE-2022-44313Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from Expressio…
CVE-2022-44312Medium5.52022-11-08PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOp…
CVE-2022-34556Medium5.52022-07-28PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.
CVE-2019-16277High7.82019-09-13PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.