ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-24130

PoC ×3—
CVSS 3.1
5.5 medium
EPSS
2%p76
Published
()
Modified
Description

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

Vendors
invisible-islanddebianfedoraproject
Products
xterm, debian linux, fedora
Weakness
CWE-120
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

No ingested article mentions this CVE yet.