Search: CVE-2026-55200

CVE-2026-55200 is a critical vulnerability in libssh2 version 1.11.1 involving an integer overflow that leads to a buffer overflow in the ssh2_transport_read() function. The flaw arises because the function does not properly enforce upper bounds on the packet_length field, allowing remote attackers to send malicious SSH packets with excessively large packet_length values. This can corrupt heap memory and potentially enable remote code execution. The issue is fixed in a commit identified by hash 97acf3d.