Description
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
CVSS 4.8EPSS 0%Risk 0.48
View source- Published
- 2026-08-11 20:18:49
- Last modified
- 2026-08-11 21:17:52
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N