PT-2025-42885 · Unknown · Ws Ftp Server

Stanislav Fort · Published 2025-10-21 · Updated 2026-01-09 · CVE-2025-11624

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description A stack buffer overwrite can occur on the SFTP server side when receiving a malicious packet. The issue arises when the packet's handle size exceeds the system handle or file descriptor size, but remains within the maximum allowed handle size. This could potentially allow for unauthorized access or control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-11624

Affected Products

Ws Ftp Server

References · 6

• https://osv.dev/vulnerability/CVE-2025-11624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11624 · Security Note
• https://github.com/wolfSSL/wolfssh/pull/834 · Note
• https://twitter.com/wolfSSL/status/2009701875126333884 · Twitter Post
• https://t.me/CVEtracker/35396 · Telegram Post
• https://twitter.com/wolfSSL/status/1981784058095902930 · Twitter Post