CVE-2026-73564

The CVE affects frp (frps) with the SSH Tunnel Gateway enabled. A root cause was an integer overflow in parsing an SSH exec channel: the code adds 4 to an attacker-controlled 4-byte length, and 0xFFFFFFFF wraps to 3, causing a bounds check bypass and a panic in TunnelServer.handleNewChannel. When...