CVE-2026-83742

The wolfSSL wolfSSH library (versions 1.4.11 through 1.5.0 ) is vulnerable to an unsigned integer underflow in the wstrncat() function located in src/port.c on non-Windows platforms. This flaw occurs because wolfSSH_RealPath() in src/ssh.c incorrectly uses a remaining-size bound (outSz - curSz) i...