CVE-2026-73282

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Score

CVSS 3.1 4.8 Medium

Status

Analyzed - cve@mitre.org

Published

2026-08-11

Last modified

2026-10-24

Weaknesses

CWE-416

Affected products

• Openssh (Openbsd)

References

• https://www.openssh.org/releasenotes.html#10.5