CVE-2026-58050

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.2

Description An integer overflow occurs when the software reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response. This value is used in the allocation num attrs * sizeof(libssh2 publickey attribute) without bounds checking. On 32-bit platforms, this multiplication can overflow, resulting in an undersized buffer. A malicious SSH server can then exploit this to write past the allocation, leading to a heap buffer overflow in a connecting client.

Recommendations Update libssh2 to a version newer than 1.11.1.