CVE-2022-24130: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days.

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Invisible-Island Xterm: up to and including 370

Published 2022-01-31. Last modified 2026-06-17.