CVE-2026-101276

iperf3 3.21 esnet/iperf contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog servertimerproc frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperfstream; fixed in 3.22...

CVE-2026-101276

The iperf3 network testing tool (version 3.21 ) is vulnerable to a remote, unauthenticated heap use-after-free flaw. The issue occurs because the server's per-test watchdog function, server_timer_proc(), frees streams without properly cancelling or joining their associated worker threads. Consequ...

EUVD-2026-90387

iperf3 3.21 esnet/iperf contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog servertimerproc frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperfstream; fixed in 3.22...