iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length...
7.5CVSS
7.6AI Score
0.003EPSS
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer...
9.8CVSS
9.5AI Score
0.017EPSS