CVE-2025-15382 — Client SCP Request Triggers Buffer Overread by 1 Byte

CVE-2025-15382

Client SCP Request Triggers Buffer Overread by 1 Byte PUBLISHED

Description (CNA)

A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSH	affected 1.4.12 before 1.4.21

CWE

CWE-125

References

https://github.com/wolfSSL/wolfssh/pull/859

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.