debian/dpic vulnerabilities

Latest debian/dpic CVEs

Newest publication first

1. CVE-2021-33390 dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

   Published 2023-08-22

   Critical·CVSS 9.8 EPSS 0.77%

   dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

2. CVE-2021-33388 dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y

   Published 2023-08-22

   Critical·CVSS 9.8 EPSS 0.76%

   dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y

3. CVE-2021-32422 dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.

   Published 2023-08-22

   High·CVSS 7.5 EPSS 0.81%

   dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.

4. CVE-2021-32421 dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.

   Published 2023-08-22

   High·CVSS 7.5 EPSS 0.75%

   dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.

5. CVE-2021-32420 dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.

   Published 2023-08-22

   High·CVSS 7.5 EPSS 0.80%

   dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.

6. CVE-2019-13989 dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

   Published 2019-07-19

   High·CVSS 7.8 EPSS 0.98%

   dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.