CVE-2026-71218

Name of the Vulnerable Software and Affected Versions iperf3 (affected versions not specified)

Description A remote unauthenticated attacker can exploit a flaw in the JSON read() function. The function accepts a message length controlled by the peer and allocates memory without an upper bound, which can lead to excessive memory consumption. This results in a Denial of Service (DoS) caused by memory exhaustion, severe system slowdown, or the termination of the iperf3 service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.