Vulnerabilities > CVE-2023-35849 - Improper Check for Unusual or Exceptional Conditions vulnerability in Virtualsquare Picotcp

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
virtualsquare
CWE-754

Summary

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.

Vulnerable Configurations

Part Description Count
Application
Virtualsquare
1