Infinite loop, memory leak, and heap-based buffer over-read vulnerabilities

The haven R package is exposed to multiple vulnerabilities due to issues in its underlying ReadStat library. The specific flaws include an infinite loop condition, a memory leak associated with an iconv_open call, and a heap-based buffer over-read via an unterminated string. Exploitation of these vulnerabilities could lead to Denial of Service or other undefined behaviors.