CVE Catalog
CVE-2023-35849
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.53%
41th percentile - higher than 41% of all known CVEs
Summary
VirtualSquare picoTCP through version 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.
Risk Assessment
Improper header size checks may lead to potential security breaches, allowing attackers to access memory outside of the allowed area.
Recommendation
It is recommended to update picoTCP to the latest version to ensure proper header size checks and minimize risk.
Other vulnerabilities in VirtualSquare picoTCP
Original NVD description (English source)
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS