CVE-2022-44316

Description

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.

Affected Platforms

Weakness Type

CWE-787, CWE-787

References

• https://github.com/jpoirier/picoc/issues/37
• https://gitlab.com/zsaleeba/picoc/-/issues/48
• https://github.com/jpoirier/picoc/issues/37
• https://gitlab.com/zsaleeba/picoc/-/issues/48