TI-2025-14280 CVE-2025-15661 · GHSA-3wqh-87fg-ffgg
libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c
Priority LOW 37
libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose…