CVE-2025-4878 — Libssh: use of uninitialized variable in privatekey_from_file()
A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the fi…
Published: 2025-07-22 · CVSS: 3.6 · CVSS 3.1
A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7