Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2026-58050: libssh2 heap buffer overflow in publickey-subsystem
CVE-2026-58050
Summary
A malicious SSH server can cause a libssh2 client to crash or run malicious code. This affects libssh2 versions up to 1.11.1. To protect your system, update to a newer version of libssh2 that fixes this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| libssh2 | libssh2 |
<= 1.11.1 cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:* |
Original title
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without ...
Original description
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious SSH server can then drive the attribute-parsing loop to write past the allocation, causing a heap buffer overflow in a connecting libssh2 client.
nvd CVSS3.1
7.0
nvd CVSS4.0
8.3
Vulnerability type
CWE-190
Integer Overflow
Published: 28 Jun 2026 · Updated: 23 Jul 2026 · First seen: 28 Jun 2026