THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-4878 (LOW 3.6) — A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption

[NVD] CVE-2025-4878 (LOW 3.6) — A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption

lownvdPublished 2025-07-22

CVE-2025-4878 CVSS: 3.6 LOW Published: 2025-07-22T15:15:36.307

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

Indicators of compromise

CVE-2025-4878cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-4878