This vulnerability (CWE-126) involves a buffer over-read in wolfSSHd on Windows platforms when handling terminal resize requests. An authenticated user with low privileges can trigger an out-of-bounds read after establishing a connection, resulting in leakage of adjacent stack memory to the pseudo-console output. The CVSS 4.0 base score is 2.3, reflecting low impact and ease of exploitation under limited conditions. No known exploits are reported in the wild, and no official fix or patch has been documented by the vendor as of the publication date.

An authenticated user with low privileges can cause the wolfSSH server to read memory beyond intended bounds, potentially leaking sensitive adjacent stack memory to the pseudo-console output. The impact is limited due to the low CVSS score and the requirement for authentication. There is no indication of remote code execution or denial of service from this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to wolfSSH services to trusted users only and monitor for unusual terminal resize requests. No vendor advisory or patch links are currently provided.