wolfSSH vulnerabilities
We track 2 vulnerabilities in wolfSSH products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2025.
2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score
Latest wolfSSH vulnerabilities
- 9.8 Critical severity
wolfSSH: Out-of-bounds Write
Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system handle or file descriptor size, but smaller than max handle size allowed.
- 9.1 Critical severity
wolfSSH: Improper Authentication
A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.