PT-2026-84307

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read string to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...