Halcy0Nico

**Name of the Vulnerable Software and Affected Versions** SimpleNetwork through 29bc615 **Description** The issue is caused by an off-by-one error in TCPServer.cpp, leading to a buffer overflow when trying to add '0' to the end of long msg data. This can be exploited via crafted TCP packets. **Recommendations** For SimpleNetwork through 29bc615, as a temporary workaround, consider restricting the length of msg data to prevent buffer overflow until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MicroHttpServer versions through a8ab029 **Description** The issue allows a one-byte recv buffer overflow via a long URI in the ParseHeader function located in lib/server.c. **Recommendations** For versions through a8ab029, consider restricting access to the ` ParseHeader` function in lib/server.c until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.