by Kastro
Paper/Archive/CVE-2025-11624

CVE-2025-11624

wolfSSH wolfSSH — Buffer overwrite when processing file handles with the SFTP server

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.5.305 × 206.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system handle or file descriptor size, but smaller than max handle size allowed.

Affected

ProductAffectedFixed inSource
wolfSSH1.3.0 – 1.4.20–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
wolfSSL (CNA)1.8CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgithub.com/wolfSSL/wolfssh/pull/834