CVE-2026-0930 PUBLISHED

Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize

Assigner: wolfSSL
Reserved: 13.01.2026 Published: 20.04.2026 Updated: 20.04.2026

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS Score: 2.3

Product Status

Vendor wolfSSL
Product wolfSSH
Versions Default: unaffected
  • affected from 1.4.15 to 1.5.0 (excl.)

Credits

  • Luigino Camastra finder
  • Pavel Kohout finder

References

Problem Types

  • CWE-126 Buffer over-read CWE