Invisible-island vulnerabilities
We track 3 vulnerabilities in Invisible-island products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 14, 2023.
Latest Invisible-island vulnerabilities
- 7.8 High severity
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Write
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment va
- 9.8 Critical severity
Xterm: Improper Neutralization of Special Elements used in a Command
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Lin
- 7.1 High severity
Ncurses: Out-of-bounds Read
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.