CVE-2021-33304: Altran Picotcp

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code.

Affected products

• Altran Picotcp: version 1.7.0 only
• Altran Picotcp-NG: version 2.1 only

Published 2023-02-15. Last modified 2026-06-17.