Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Dpic Project records in CISA KEVNo Dpic Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00768 · Published 2023-08-22 · No fix listed CWE-416
Priority HIGH 82
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00755 · Published 2023-08-22 · No fix listed CWE-787
Priority HIGH 72
dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00814 · Published 2023-08-22 · No fix listed CWE-120
Priority HIGH 72
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00798 · Published 2023-08-22 · No fix listed CWE-787
Priority MEDIUM 40
dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00753 · Published 2023-08-22 · No fix listed CWE-416
Priority LOW 36
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00982 · Published 2019-07-19 · No fix listed CWE-787
Open these records in search →