ConnectBot SSH Client Library processes SSH packets using a Kaitai Struct parser that accepts attacker-controlled lengths and element counts without verifying that they fit within the outer packet. An attacker can send a small malformed packet whose length declarations are in fact oversized, causing the Java runtime to attempt excessive memory allocation or repeated parsing. This leads to an uncaught OutOfMemoryError and terminates the client application, resulting in a denial‑of‑service. No confidentiality or integrity compromise is demonstrated.

The vulnerability affects the ConnectBot SSH Client Library (connectbot:cbssh). All releases prior to version 0.3.1 are susceptible; version 0.3.1 and later include the fix.

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The vulnerability requires a client connection to a malicious or compromised SSH server; for malformed SSH‑agent messages the attacker also needs to enable agent forwarding. An adversary who can force such a connection can trigger an uncaught OutOfMemoryError that terminates the client application, resulting in a denial‑of‑service. There is no demonstrated confidentiality or integrity impact, and no evidence of active exploitation is reported.