Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-15382 EUVD-2026-0989GHSA-6mw8-c4j3-m9rv

Client SCP Request Triggers Buffer Overread by 1 Byte

Published Jan 6, 2026 · Updated Jan 6, 2026 · Assigned by wolfSSL

Description

A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.

Affected products

VendorProductAffectedFixed
wolfSSL wolfSSH 1.4.12 – < 1.4.21 1.4.21

References