CVE-2009-1608: Microchip Mplab IDE

High severity, CVSS 9.3. EPSS: 11.2% chance of exploitation in the next 30 days.

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.

Affected products

• Microchip Mplab IDE: version 8.30 only

Published 2009-05-11. Last modified 2026-06-16.