CVE-2025-5318

Name of the Vulnerable Software and Affected Versions: libssh (affected versions not specified)

Description: A flaw in the libssh library can trigger an out-of-bounds read in the sftp handle function due to an incorrect comparison check. This allows the function to access memory beyond the valid handle list and return an invalid pointer, which is used in further processing. An authenticated remote attacker can potentially read unintended memory regions, exposing sensitive information or affecting service behavior.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.