CVE-2025-11624

    Dashboard / Vulnerabilities / CVE-2025-11624

    CVE-2025-11624

    Published: 21 Oct 2025Last Modified: 12 Aug 2026

    Summary: Buffer overwrite when processing file handles with the SFTP server

    Details: Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system handle or file descriptor size, but smaller than max handle size allowed.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11624.json, https://nvd.nist.gov/vuln/detail/CVE-2025-11624, https://github.com/wolfSSL/wolfssh/pull/834

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 20dcc22c0137216218ac617f32751b9bc7e6447b
    Fixed -None

    Affected versions

    v1.4.20-stable
    v1.4.19-stable
    v1.4.18-stable
    v1.4.17-stable
    v1.4.15-stable
    v1.4.16
    v1.4.14-stable
    v1.4.13-stable
    v1.4.12-stable
    v1.4.11-stable
    v1.4.10-stable
    v1.4.9
    v1.4.8-stable
    v1.4.7-stable
    v1.4.6-stable
    v1.4.5-stable
    v1.4.4-stable
    v1.4.3-stable
    v1.4.2-stable
    v1.4.0-stable

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2025-11624 | CVE-DB