https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-35849.htmlhttps://patchthecve.com/cve/CVE-2023-35849.htmlWed, 17 Jun 2026 06:05:20 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.https://patchthecve.com/cve/CVE-2023-35848.htmlhttps://patchthecve.com/cve/CVE-2023-35848.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.https://patchthecve.com/cve/CVE-2023-35847.htmlhttps://patchthecve.com/cve/CVE-2023-35847.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).https://patchthecve.com/cve/CVE-2023-35846.htmlhttps://patchthecve.com/cve/CVE-2023-35846.htmlWed, 17 Jun 2026 06:05:19 +0000HIGH 7.5: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.