1 issue skipped by the security teams:
- CVE-2016-4303: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/i/iperf3.png){kind=link}