CVE-2025-15382 — Client SCP Request Triggers Buffer Overread by 1 Byte
A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input co…
Published: 2026-01-06 · CVSS: 5.1 · CVSS 4.0
A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7