CVE-2023-35848 Information

Description

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.

Reference

https://github.com/virtualsquare/picotcp/pull/15/files