Launchpad.net

CVE 2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

See the CVE page on Mitre.org for more details.