dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Link | Tags |
---|---|
https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf | third party advisory |
https://gitlab.com/aplevich/dpic/-/issues/6 | third party advisory |