CVE-2024-22087

CRITICAL

Pico HTTP Server in C < 2021-04-02 - Remote Code Execution via Long URI

Title source: llm

route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.

Core 3

Core References

Exploit, Issue Tracking, Mitigation, Third Party Advisory

Patch

Patch

CVSS v3 9.8

EPSS 0.0161

EPSS Percentile 72.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-787

Status published

Products (1)

alekseykurepin/pico_http_server_in_c < 2021-04-02

Published Jan 05, 2024

Tracked Since Feb 18, 2026