exploitDog

GHSA-2pj2-82cm-7r39

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.

PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2019-16277
https://gitlab.com/zsaleeba/picoc/issues/44

EPSS

Процентиль: 56%

0.00891

Низкий

CVE ID

Связанные уязвимости

CVE-2019-16277

CVSS3: 7.8

nvd

почти 7 лет назад

PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.

EPSS

Процентиль: 56%

0.00891

Низкий

CVE ID