5 ms·

I'd say the "trusting the length value from the client and using it to allocate memory" is the one issue that actually has security implications.