A heap out-of-bounds read vulnerability exists in libssh2 versions prior to 1.11.1_4. This flaw occurs in the publickey subsystem where a missing bounds check allows a malicious SSH server to cause an arbitrary-length heap read and free an uninitialized pointer. The issue is fixed in version 1.11.1_4.