CVE-2026-0930: CWE-126 Buffer over-read in wolfSSL wolfSSH
CVE-2026-0930 is a low-severity buffer over-read vulnerability in wolfSSL's wolfSSH version 1. 4. 15 on Windows. It occurs when an authenticated user sends a terminal resize request, causing the wolfSSH daemon to read out of bounds on the stack. This can lead to leakage of adjacent stack memory to the pseudo-console output. No known exploits are reported in the wild. There is no official patch or remediation level currently provided by the vendor.
AI Analysis
Technical Summary
This vulnerability involves a potential out-of-bounds read in wolfSSHd on Windows when processing a terminal resize request. An authenticated user with low privileges can trigger this condition after establishing a connection, resulting in leakage of adjacent stack memory through the pseudo-console output. The issue is classified under CWE-126 (Buffer Over-read) and affects wolfSSH version 1.4.15. The CVSS 4.0 base score is 2.3, indicating low severity. No patch or official remediation guidance is currently available from wolfSSL.
Potential Impact
An authenticated user with low privileges can cause the wolfSSH daemon to read memory beyond the intended buffer boundaries, potentially leaking sensitive adjacent stack memory to the pseudo-console output. This information disclosure is limited by the requirement for authentication and the low complexity of the attack, resulting in a low overall severity impact.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to wolfSSH services to trusted users only and monitor for unusual terminal resize requests. No official patch or temporary fix is currently available from wolfSSL.
CVE-2026-0930: CWE-126 Buffer over-read in wolfSSL wolfSSH
Description
CVE-2026-0930 is a low-severity buffer over-read vulnerability in wolfSSL's wolfSSH version 1. 4. 15 on Windows. It occurs when an authenticated user sends a terminal resize request, causing the wolfSSH daemon to read out of bounds on the stack. This can lead to leakage of adjacent stack memory to the pseudo-console output. No known exploits are reported in the wild. There is no official patch or remediation level currently provided by the vendor.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a potential out-of-bounds read in wolfSSHd on Windows when processing a terminal resize request. An authenticated user with low privileges can trigger this condition after establishing a connection, resulting in leakage of adjacent stack memory through the pseudo-console output. The issue is classified under CWE-126 (Buffer Over-read) and affects wolfSSH version 1.4.15. The CVSS 4.0 base score is 2.3, indicating low severity. No patch or official remediation guidance is currently available from wolfSSL.
Potential Impact
An authenticated user with low privileges can cause the wolfSSH daemon to read memory beyond the intended buffer boundaries, potentially leaking sensitive adjacent stack memory to the pseudo-console output. This information disclosure is limited by the requirement for authentication and the low complexity of the attack, resulting in a low overall severity impact.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to wolfSSH services to trusted users only and monitor for unusual terminal resize requests. No official patch or temporary fix is currently available from wolfSSL.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- wolfSSL
- Date Reserved
- 2026-01-13T23:45:50.452Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69e69e9e19fe3cd2cd35b3c9
Added to database: 4/20/2026, 9:46:06 PM
Last enriched: 4/20/2026, 10:01:22 PM
Last updated: 4/21/2026, 12:08:51 AM
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.