A heap buffer overflow exists in the synchronous TCP and TLS client within the `handleReadHeader()` function of `TurnTcpSocket` (also inherited by `TurnTlsSocket`). This occurs when a malicious TURN server or an on-path attacker sends STUN or ChannelData frames with oversized lengths up to 65535 bytes. This action allows the attacker to write approximately 57 KB beyond the fixed 8192-byte `mReadBuffer`, leading to memory overwrite and client crashes. A heap buffer overflow is a condition where a program writes more data to a heap-allocated memory block than it can hold.