Vendor
An unauthenticated heap-based buffer overflow in snac2 versions before 2.93 allows remote attackers to trigger memory corruption via a specially crafted JSON payload.