PatchTheCVE: picotcphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-27635: In PicoTCP 1.7.0, TCP ISNs are improperly random.https://patchthecve.com/cve/CVE-2020-27635.htmlhttps://patchthecve.com/cve/CVE-2020-27635.htmlWed, 17 Jun 2026 03:09:24 +0000CRITICAL 9.1: In PicoTCP 1.7.0, TCP ISNs are improperly random.CVE-2023-35849: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result ihttps://patchthecve.com/cve/CVE-2023-35849.htmlhttps://patchthecve.com/cve/CVE-2023-35849.htmlWed, 17 Jun 2026 06:05:20 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.CVE-2023-35848: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a https://patchthecve.com/cve/CVE-2023-35848.htmlhttps://patchthecve.com/cve/CVE-2023-35848.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.CVE-2023-35847: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).https://patchthecve.com/cve/CVE-2023-35847.htmlhttps://patchthecve.com/cve/CVE-2023-35847.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).CVE-2023-35846: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame beforehttps://patchthecve.com/cve/CVE-2023-35846.htmlhttps://patchthecve.com/cve/CVE-2023-35846.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.CVE-2023-30463: Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integerhttps://patchthecve.com/cve/CVE-2023-30463.htmlhttps://patchthecve.com/cve/CVE-2023-30463.htmlWed, 17 Jun 2026 05:54:46 +0000HIGH 7.5: Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.CVE-2021-33304: Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in fhttps://patchthecve.com/cve/CVE-2021-33304.htmlhttps://patchthecve.com/cve/CVE-2021-33304.htmlWed, 17 Jun 2026 03:54:25 +0000CRITICAL 9.8: Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code.