CVE-2022-44319: Picoc Project Picoc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall.

Affected products

• Picoc Project Picoc: version 3.2.2 only

Published 2022-11-08. Last modified 2026-06-17.