CVE-2025-11624: Buffer overwrite when processing file handles with the SFTP server
Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system handle or file descriptor size, but smaller than max handle size allowed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11624?
CVE-2025-11624 is considered a high severity vulnerability due to the potential for stack buffer overwrite.
How do I fix CVE-2025-11624?
To remediate CVE-2025-11624, update WolfSSH to the latest version which includes the patch addressing this vulnerability.
Who is affected by CVE-2025-11624?
CVE-2025-11624 affects users of WolfSSH versions between 1.3.0 and 1.4.20.
What is the potential impact of CVE-2025-11624?
The potential impact of CVE-2025-11624 includes unauthorized access and the ability to execute arbitrary code on the SFTP server.
Does CVE-2025-11624 require authentication for exploitation?
CVE-2025-11624 can be exploited by attackers who can send specially crafted packets to the SFTP server, potentially without authentication.