CVE-2022-44318: Picoc Project Picoc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall.

Affected products

• Picoc Project Picoc: version 3.2.2 only

Published 2022-11-08. Last modified 2026-06-17.