TI-2026-41805 CVE-2026-58050 · GHSA-mf77-5hj2-98w9
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
Priority LOW 36
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking, so on…