CVE-2023-35848

HighCVSS 7.5

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

43th percentile - higher than 43% of all known CVEs

Summary

VirtualSquare picoTCP (also known as PicoTCP-NG) through version 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.

Risk Assessment

The lack of proper size calculations may lead to application malfunctions or potential errors in network communication.

Recommendation

It is recommended to update to the latest version of picoTCP to ensure correct size calculations and avoid potential issues.

Other vulnerabilities in picoTCP

CVE-2017-1000210Critical
picoTCP versions 1.7.0 to 1.5.0 are vulnerable to stack buffer overflow, which may lead to code execution or denial of service attacks.

Original NVD description (English source)

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.