PatchTheCVE: dpic projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-33390: dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.yhttps://patchthecve.com/cve/CVE-2021-33390.htmlhttps://patchthecve.com/cve/CVE-2021-33390.htmlWed, 17 Jun 2026 03:54:31 +0000CRITICAL 9.8: dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.CVE-2021-33388: dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.yhttps://patchthecve.com/cve/CVE-2021-33388.htmlhttps://patchthecve.com/cve/CVE-2021-33388.htmlWed, 17 Jun 2026 03:54:31 +0000CRITICAL 9.8: dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.yCVE-2021-32422: dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound arrayhttps://patchthecve.com/cve/CVE-2021-32422.htmlhttps://patchthecve.com/cve/CVE-2021-32422.htmlWed, 17 Jun 2026 03:52:56 +0000HIGH 7.5: dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.CVE-2021-32421: dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.https://patchthecve.com/cve/CVE-2021-32421.htmlhttps://patchthecve.com/cve/CVE-2021-32421.htmlWed, 17 Jun 2026 03:52:56 +0000HIGH 7.5: dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.CVE-2021-32420: dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.https://patchthecve.com/cve/CVE-2021-32420.htmlhttps://patchthecve.com/cve/CVE-2021-32420.htmlWed, 17 Jun 2026 03:52:56 +0000HIGH 7.5: dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.