CVE-2026-58050: libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
Last updated 13 July 2026
Other sources
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeof(libssh2publickeyattribute) without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious SSH server can then drive the attribute-parsing loop to write past the allocation, causing a heap buffer overflow in a connecting libssh2 client.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58050?
The severity of CVE-2026-58050 is rated as high, with a score of 7.
How does CVE-2026-58050 exploit integer overflow?
CVE-2026-58050 exploits integer overflow by reading an attacker-controlled 32-bit attribute count that leads to an undersized buffer allocation.
Which software versions are affected by CVE-2026-58050?
CVE-2026-58050 affects libssh2 versions through 1.11.1.
What are the potential impacts of CVE-2026-58050?
The potential impacts of CVE-2026-58050 include buffer overflow that can lead to application crashes or execution of arbitrary code.
How can I mitigate the risks associated with CVE-2026-58050?
To mitigate risks associated with CVE-2026-58050, update to the latest version of libssh2 that addresses this vulnerability.