CVE-2025-54349: Es IPERF3

Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days.

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

Affected products

• Es IPERF3: from 3.2, before 3.19.1 (fixed in 3.19.1)

Published 2025-08-03. Last modified 2026-06-17.