wolfSSH Heap Buffer Over-Read Vulnerability in wolfSSH_CleanPath() Function

A heap buffer over-read vulnerability has been identified in the wolfSSH_CleanPath() function of wolfSSH. This vulnerability allows an authenticated remote attacker to exploit the issue by sending crafted SCP path input that includes '/./' sequences. The exploitation of this vulnerability results in a heap over-read of 1 byte.

Impact

Exploitation of this vulnerability leads to a heap buffer over-read, which can potentially be used to disclose memory contents or cause other memory-related issues.