Microchip Mplab IDE vulnerabilities

2 CVEs affecting Microchip Mplab IDE, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1674, published 2009-05-18.

More from Microchip.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-1608, published 2009-05-11. High severity, CVSS 9.3. EPSS: 11.2% chance of exploitation in the next 30 days. Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2)…
• CVE-2009-1674, published 2009-05-18. High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly…