CVE-2026-54700

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...

CVE-2026-54700

The ConnectBot SSH Client Library (prior to version 0.3.1 ) contains a vulnerability where the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying if they fit within the containing packet. A malicious or compromised SSH server can send a small, m...

CVE-2026-54700 ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...

CVE-2026-54700 ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...

CVE-2026-54700: Improper Input Validation

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...