CVE-2022-44316: Picoc Project Picoc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.

Affected products

• Picoc Project Picoc: version 3.2.2 only

Published 2022-11-08. Last modified 2026-06-17.