← All advisories

Critical severity9.8NVD Advisory· Published Jan 5, 2024· Updated Jun 17, 2026

CVE-2024-22087

CVE-2024-22087

Description

route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Pico/Pico HTTP Serverdescription
Foxweb/picollm-create
Range: <=f3b69a6
Pico Server/Pico Serverllm-fuzzy
Range: <=f3b69a6

Patches

Vulnerability mechanics

References

3

github.com/foxweb/pico/issues/31nvdExploitIssue TrackingMitigationThird Party Advisory
github.com/foxweb/pico/commit/7a5e4e242121c839cb77f5b9003e735a852f4e58nvd
github.com/foxweb/pico/commit/e2d172fnvd

News mentions

0

No linked articles in our index yet.