CVE-2020-17445: Altran Picotcp

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options header. This results in an Out-of-Bounds Read, and, depending on the memory protection mechanism, this may result in Denial-of-Service in pico_ipv6_process_destopt() in pico_ipv6.c.

Affected products

• Altran Picotcp: up to and including 1.7.0

Published 2020-12-11. Last modified 2026-06-17.