NTPsec (< 1.2.5)

NTPsec before 1.2.5 is vulnerable to an out-of-bounds read and write in NTS client extension field parsing, which can lead to heap memory corruption, service crashes, and authentication bypass.