Neeraj Pal

**Name of the Vulnerable Software and Affected Versions** dpic version 2021.04.10 **Description** The issue is a Heap Buffer Overflow in the `themakevar()` function in `dpic.y`. This is a general information about the problem, but details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are not available. The `themakevar()` function is vulnerable, but no specific API endpoints or parameters are mentioned. **Recommendations** For dpic version 2021.04.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.