CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
CVSS

No CVSS.

Configurations

No configuration.

History

29 Jul 2025, 20:15

Type Values Removed Values Added
CWE CWE-416
References
  • () https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1 -
  • () https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb -
CVSS v2 : unknown
v3 : 3.6
v2 : unknown
v3 : unknown

22 Jul 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-22 15:15

Updated : 2025-07-29 20:15


NVD link : CVE-2025-4878

Mitre link : CVE-2025-4878


JSON object : View

Products Affected

No product.

CWE

No CWE.