CVE-2026-101283CWE-122

CVE-2026-101283

published October 1, 2026

CVSS
9.2
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-10-01T02:16Z
References (1)
https://newreleases.io/project/github/esnet/iperf/release/3.22 · 98a01053-8a31-4f6d-9aa9-252be161adc6
EPSS history
Timeline
  • 02 OCT 03:41Z
    EPSS moved — → 0%
    epss
  • 30 SEP 21:32Z
    iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled…
    cvelistv5