CVE-2023-40359 | BDVDB-2026-209684 Detail

Description#

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://invisible-island.net/xterm/xterm.log.html#xterm_380

Exploit#

No public exploit known

History#

Version 12023-08-14Record published in the CVE List.
Version 22024-10-09Most recent update recorded in the CVE List.