Vulnerability CVE-2022-41138


Published: 2022-09-20

Description:
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

 References:
https://bugs.gentoo.org/868495
https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865edfa38
https://github.com/tomszilagyi/zutty/compare/0.12...0.13

Copyright 2024, cxsecurity.com

 

Back to Top