{"id":"CVE-2023-35849","details":"VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.","modified":"2026-08-12T14:50:46.053403Z","published":"2023-06-19T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35849.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35849.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35849"},{"type":"FIX","url":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/virtualsquare/picotcp","events":[{"introduced":"0"},{"fixed":"4b9a16764f2b12b611de9c34a50b4713d10ca401"}],"database_specific":{"cpe":"cpe:2.3:a:virtualsquare:picotcp:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v2.1","2.0.0","v1.6.0","v1.5.1","v1.5.0","v1.3.0","V1.2.4","v1.2.2","v1.2.1","v1.2","sprint8","sprint7","V1.0","sprint6","sprint5","sprint4","sprint3","sprint2","sprint1","sprint0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35849.json","vanir_signatures_modified":"2026-08-12T14:50:46Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401","target":{"file":"modules/pico_tcp.c"},"deprecated":false,"digest":{"line_hashes":["285654499533611993025090254575033670277","26037530924489790984786846986245495857","292280616955719529858654022839423124462","292622618448040082506854441821239042150","317206684698788525413602045195138979345","293444560465348784834763654659846358951","336952581479197438299798455481673249593"],"threshold":0.9},"id":"CVE-2023-35849-48818375","signature_type":"Line"},{"id":"CVE-2023-35849-502e4c8c","signature_type":"Line","signature_version":"v1","source":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401","target":{"file":"modules/pico_ipv4.c"},"deprecated":false,"digest":{"line_hashes":["165320861050205378918815324656663061427","66134852335644723728004897969199184542","72433470875399735997617401182881970106","169223175135825161763931249825801426722"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401","target":{"file":"modules/pico_tcp.c","function":"tcp_parse_option_mss"},"deprecated":false,"digest":{"function_hash":"47031951348502463246891012409039473344","length":348},"id":"CVE-2023-35849-720616ea"},{"id":"CVE-2023-35849-b60d285f","signature_type":"Function","signature_version":"v1","source":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401","target":{"file":"modules/pico_tcp.c","function":"tcp_parse_options"},"deprecated":false,"digest":{"function_hash":"251575072811989124521923787802918092736","length":1171}},{"signature_version":"v1","source":"https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401","target":{"file":"modules/pico_ipv4.c","function":"pico_ipv4_process_in"},"deprecated":false,"digest":{"function_hash":"23149032687452435093609048267686222926","length":1893},"id":"CVE-2023-35849-c96c1b5c","signature_type":"Function"}]}}],"schema_version":"1.9.0"}