Skip to content
OpenAdvisories
Low · 1.8 CVE-2025-11624 EUVD-2025-35172GHSA-547f-m8pf-r989

Buffer overwrite when processing file handles with the SFTP server

Published Oct 21, 2025 · Updated Oct 21, 2025 · Assigned by wolfSSL

Description

Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system handle or file descriptor size, but smaller than max handle size allowed.

Affected products

VendorProductAffectedFixed
wolfSSH wolfSSH — —

References