CVE-2022-41138

Description

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

Affected Platforms

Weakness Type

NVD-CWE-noinfo, CWE-94

References

• https://bugs.gentoo.org/868495
• https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865ed…
• https://github.com/tomszilagyi/zutty/compare/0.12...0.13
• https://security.gentoo.org/glsa/202209-25
• https://bugs.gentoo.org/868495
• https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865ed…