{"id":"CVE-2021-27135","details":"xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.","modified":"2026-04-16T04:31:31.603774141Z","published":"2021-02-10T16:15:13.787Z","related":["ALSA-2021:0611","SUSE-SU-2021:14747-1","SUSE-SU-2021:2011-1","SUSE-SU-2021:2013-1","SUSE-SU-2021:2014-1","openSUSE-SU-2021:0900-1","openSUSE-SU-2021:2011-1","openSUSE-SU-2024:11527-1"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/02/10/7"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2021-27135"},{"type":"ADVISORY","url":"https://invisible-island.net/xterm/xterm.log.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202208-22"},{"type":"ADVISORY","url":"https://www.openwall.com/lists/oss-security/2021/02/09/7"},{"type":"ADVISORY","url":"https://www.openwall.com/lists/oss-security/2021/02/09/9"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2021/May/52"},{"type":"REPORT","url":"https://news.ycombinator.com/item?id=26524650"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1182091"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927559"},{"type":"FIX","url":"https://github.com/ThomasDickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ThomasDickey/xterm-snapshots","events":[{"introduced":"0"},{"fixed":"a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"366"}]}},{"type":"GIT","repo":"https://github.com/thomasdickey/xterm-snapshots","events":[{"introduced":"0"},{"fixed":"82ba55b8f994ab30ff561a347b82ea340ba7075c"}]}],"versions":["X11R5","X11R6_1rel","X11R6_3rel","XFree86-3_1_2E","XFree86-3_1_2F","XFree86-3_1_2G","XFree86-3_2","XFree86-3_2A","XFree86-3_3","XFree86-3_9Ab","XFree86-3_9Ac","XFree86-3_9Ad","XFree86-3_9Af","XFree86-3_9Ag","XFree86-3_9Ah","XFree86-3_9Ai","XFree86-3_9Aj","XFree86-3_9Nb","XFree86-3_9Nc","XFree86-3_9Nk","XFree86-3_9Nl","XFree86-3_9Nn","XFree86-3_9Ns","XFree86-3_9Nx","XFree86-3_9Nz","XFree86-3_9P","XFree86-3_9Pe","XFree86-3_9Pg","XFree86-3_9Pi","XFree86-3_9Pn","XFree86-3_9Pq","XFree86-3_9Ps","XFree86-3_9Pv","XFree86-3_9Px","XFree86-3_9_15","XFree86-3_9_15c","XFree86-3_9_16b","XFree86-3_9_16d","XFree86-3_9_17","XFree86-3_9_17a","XFree86-3_9_17e","XFree86-3_9_17f","XFree86-3_9_18","XFree86-3_9k","XFree86-3_9m","XFree86-3_9n","XFree86-3_9q","XFree86-3_9s","XFree86-3_9t","XFree86-3_9w","XFree86-3_9y","XFree86-4_0_1c","XFree86-4_0_1d","XFree86-4_0_1e","XFree86-4_0b","XFree86-4_0c","XFree86-4_0d","pre-cachedGCs","xterm-100","xterm-101","xterm-102","xterm-103","xterm-104","xterm-105","xterm-106","xterm-107","xterm-108","xterm-109","xterm-110","xterm-111","xterm-112","xterm-113","xterm-114","xterm-115","xterm-116","xterm-117","xterm-118","xterm-119","xterm-120","xterm-121","xterm-122","xterm-123","xterm-124","xterm-125","xterm-126","xterm-127","xterm-128","xterm-129","xterm-130","xterm-131","xterm-132","xterm-133","xterm-134","xterm-135","xterm-136","xterm-137","xterm-138","xterm-139","xterm-140","xterm-141","xterm-142","xterm-143","xterm-144","xterm-145","xterm-146","xterm-147","xterm-148","xterm-149","xterm-150","xterm-151","xterm-152","xterm-153","xterm-154","xterm-155","xterm-156","xterm-157","xterm-158","xterm-159","xterm-160","xterm-161","xterm-162","xterm-163","xterm-164","xterm-165","xterm-166","xterm-167","xterm-168","xterm-169","xterm-170","xterm-171","xterm-172","xterm-173","xterm-174","xterm-175","xterm-176","xterm-177","xterm-178","xterm-179","xterm-180","xterm-181","xterm-182","xterm-183","xterm-184","xterm-185","xterm-186","xterm-187","xterm-188","xterm-189","xterm-190","xterm-191","xterm-192","xterm-193","xterm-194","xterm-195","xterm-196","xterm-197","xterm-198","xterm-199","xterm-200","xterm-201","xterm-202","xterm-202f","xterm-202g","xterm-202h","xterm-203","xterm-204","xterm-204c","xterm-205","xterm-206","xterm-207","xterm-208","xterm-209","xterm-210","xterm-211","xterm-212","xterm-213","xterm-214","xterm-215","xterm-216","xterm-217","xterm-218","xterm-218b","xterm-219","xterm-220","xterm-221","xterm-222","xterm-223","xterm-223e","xterm-224","xterm-225","xterm-225d","xterm-225e","xterm-225f","xterm-225g","xterm-225h","xterm-225i","xterm-225j","xterm-225k","xterm-225l","xterm-225m","xterm-225n","xterm-226","xterm-226a","xterm-226b","xterm-226c","xterm-226d","xterm-227","xterm-227a","xterm-227b","xterm-227c","xterm-227d","xterm-227e","xterm-227f","xterm-227g","xterm-227h","xterm-227i","xterm-228","xterm-228a","xterm-229","xterm-229a","xterm-229b","xterm-229c","xterm-229d","xterm-229e","xterm-229f","xterm-229g","xterm-229h","xterm-229i","xterm-229j","xterm-229k","xterm-229l","xterm-229m","xterm-229n","xterm-229o","xterm-230","xterm-230a","xterm-231","xterm-231a","xterm-231b","xterm-231c","xterm-231d","xterm-231e","xterm-231f","xterm-231g","xterm-231i","xterm-232","xterm-232a","xterm-232b","xterm-233","xterm-233a","xterm-233b","xterm-234","xterm-234b","xterm-234c","xterm-234d","xterm-234h","xterm-235","xterm-235a","xterm-235b","xterm-235c","xterm-235d","xterm-236","xterm-236a","xterm-236b","xterm-236c","xterm-237","xterm-237a","xterm-237b","xterm-237c","xterm-238","xterm-239","xterm-239c","xterm-240","xterm-241","xterm-241a","xterm-241b","xterm-241c","xterm-241d","xterm-241e","xterm-241f","xterm-241g","xterm-242","xterm-242a","xterm-242b","xterm-242c","xterm-242d","xterm-243","xterm-243c","xterm-243d","xterm-243e","xterm-243g","xterm-243h","xterm-243i","xterm-243j","xterm-243k","xterm-243l","xterm-243m","xterm-243n","xterm-243o","xterm-243p","xterm-243q","xterm-243r","xterm-243s","xterm-243t","xterm-243u","xterm-243v","xterm-243w","xterm-244","xterm-245","xterm-245a","xterm-245b","xterm-245c","xterm-246","xterm-246a","xterm-246b","xterm-247","xterm-247a","xterm-247b","xterm-247c","xterm-247f","xterm-248","xterm-248a","xterm-248b","xterm-248c","xterm-248d","xterm-248e","xterm-248f","xterm-248g","xterm-248h","xterm-249","xterm-249a","xterm-249b","xterm-249c","xterm-250","xterm-250a","xterm-250b","xterm-250c","xterm-250d","xterm-250e","xterm-250f","xterm-251","xterm-251a","xterm-251b","xterm-251c","xterm-251d","xterm-251e","xterm-251f","xterm-251g","xterm-251h","xterm-251i","xterm-251j","xterm-251k","xterm-251l","xterm-252","xterm-252a","xterm-252b","xterm-252c","xterm-253","xterm-253a","xterm-253b","xterm-253c","xterm-253d","xterm-253e","xterm-253f","xterm-253g","xterm-253h","xterm-253i","xterm-253j","xterm-254","xterm-254a","xterm-254b","xterm-254c","xterm-254d","xterm-255","xterm-255a","xterm-255b","xterm-255c","xterm-256","xterm-256a","xterm-256b","xterm-256c","xterm-256d","xterm-256e","xterm-256f","xterm-256g","xterm-256h","xterm-256i","xterm-256j","xterm-256k","xterm-256l","xterm-256m","xterm-256n","xterm-256o","xterm-257","xterm-258","xterm-258a","xterm-258b","xterm-258c","xterm-258d","xterm-258e","xterm-258f","xterm-258g","xterm-258h","xterm-259","xterm-259a","xterm-259b","xterm-259c","xterm-259d","xterm-259e","xterm-259f","xterm-260","xterm-261","xterm-261a","xterm-261b","xterm-261c","xterm-261d","xterm-261e","xterm-262","xterm-262a","xterm-262b","xterm-262c","xterm-262d","xterm-263","xterm-264","xterm-264a","xterm-264b","xterm-265","xterm-265a","xterm-265b","xterm-266","xterm-266a","xterm-266b","xterm-266c","xterm-266d","xterm-266e","xterm-266f","xterm-267","xterm-267a","xterm-267b","xterm-267c","xterm-267d","xterm-267e","xterm-267f","xterm-267g","xterm-267h","xterm-268","xterm-268b","xterm-268c","xterm-268d","xterm-268e","xterm-268f","xterm-269","xterm-269a","xterm-269b","xterm-269c","xterm-269d","xterm-269e","xterm-269f","xterm-269g","xterm-269h","xterm-269i","xterm-269j","xterm-270","xterm-270a","xterm-270b","xterm-270c","xterm-270d","xterm-270e","xterm-270f","xterm-270g","xterm-270h","xterm-270i","xterm-270j","xterm-270k","xterm-270l","xterm-270m","xterm-270n","xterm-270o","xterm-270p","xterm-271","xterm-271a","xterm-271b","xterm-271c","xterm-271d","xterm-271e","xterm-271f","xterm-271g","xterm-271h","xterm-271i","xterm-271j","xterm-272","xterm-273","xterm-273a","xterm-273b","xterm-273c","xterm-273d","xterm-273e","xterm-274","xterm-274a","xterm-274b","xterm-274c","xterm-275","xterm-275a","xterm-275b","xterm-275c","xterm-275d","xterm-275e","xterm-276","xterm-276a","xterm-276b","xterm-276c","xterm-276d","xterm-276e","xterm-276f","xterm-276g","xterm-276h","xterm-276i","xterm-276j","xterm-276k","xterm-276l","xterm-276m","xterm-276n","xterm-276o","xterm-276p","xterm-276q","xterm-277","xterm-277b","xterm-278","xterm-278a","xterm-278b","xterm-278c","xterm-278d","xterm-278f","xterm-278g","xterm-278h","xterm-278i","xterm-278j","xterm-278k","xterm-278l","xterm-279","xterm-279a","xterm-279b","xterm-279c","xterm-279d","xterm-279e","xterm-279f","xterm-279g","xterm-280","xterm-281","xterm-281a","xterm-281c","xterm-281d","xterm-281e","xterm-281f","xterm-281g","xterm-281h","xterm-281i","xterm-281j","xterm-281k","xterm-281l","xterm-281m","xterm-281n","xterm-281o","xterm-281p","xterm-281q","xterm-281r","xterm-281s","xterm-282","xterm-282a","xterm-282b","xterm-282c","xterm-282d","xterm-283","xterm-283a","xterm-283b","xterm-284","xterm-284a","xterm-284b","xterm-285","xterm-285a","xterm-285b","xterm-285c","xterm-286","xterm-286a","xterm-286b","xterm-286c","xterm-286d","xterm-286e","xterm-286f","xterm-287","xterm-287a","xterm-287b","xterm-287d","xterm-287e","xterm-287f","xterm-287g","xterm-287h","xterm-287i","xterm-287j","xterm-288","xterm-288a","xterm-288b","xterm-288c","xterm-288d","xterm-288e","xterm-288f","xterm-288g","xterm-289","xterm-290","xterm-291","xterm-291a","xterm-291c","xterm-291d","xterm-291e","xterm-291f","xterm-291g","xterm-291h","xterm-292","xterm-292a","xterm-292b","xterm-292c","xterm-292d","xterm-292e","xterm-292f","xterm-292g","xterm-293","xterm-293-sixel1","xterm-293-sixel2","xterm-293-sixel3","xterm-293a","xterm-293b","xterm-293c","xterm-293e","xterm-293f","xterm-293g","xterm-293h","xterm-294","xterm-295","xterm-295a","xterm-296","xterm-296a","xterm-296b","xterm-296c","xterm-296d","xterm-296e","xterm-296f","xterm-296g","xterm-296h","xterm-296i","xterm-296j","xterm-296k","xterm-296l","xterm-296m","xterm-296n","xterm-297","xterm-297a","xterm-297b","xterm-297c","xterm-297d","xterm-297e","xterm-297f","xterm-297g","xterm-297h","xterm-297i","xterm-297j","xterm-298","xterm-298a","xterm-299","xterm-300","xterm-300a","xterm-300b","xterm-300c","xterm-300d","xterm-300e","xterm-300f","xterm-300g","xterm-300h","xterm-300i","xterm-301","xterm-301a","xterm-301b","xterm-301c","xterm-301d","xterm-301e","xterm-301f","xterm-301g","xterm-301h","xterm-301i","xterm-302","xterm-302b","xterm-302c","xterm-303a","xterm-303b","xterm-303c","xterm-303d","xterm-303e","xterm-303f","xterm-303h","xterm-303i","xterm-303j","xterm-303k","xterm-303l","xterm-303m","xterm-303n","xterm-303o","xterm-304","xterm-304a","xterm-304b","xterm-304c","xterm-304d","xterm-304e","xterm-304f","xterm-304g","xterm-304h","xterm-304i","xterm-304j","xterm-304k","xterm-304l","xterm-305","xterm-305a","xterm-306","xterm-306a","xterm-306b","xterm-306c","xterm-306d","xterm-306e","xterm-306f","xterm-306g","xterm-306h","xterm-306i","xterm-307","xterm-307a","xterm-307b","xterm-308","xterm-308a","xterm-308b","xterm-308c","xterm-308d","xterm-309","xterm-309a","xterm-309b","xterm-309c","xterm-309d","xterm-309e","xterm-310","xterm-310a","xterm-310b","xterm-310c","xterm-310d","xterm-310e","xterm-310f","xterm-310g","xterm-311","xterm-311a","xterm-312","xterm-312a","xterm-312b","xterm-312c","xterm-312d","xterm-312e","xterm-312f","xterm-312g","xterm-312h","xterm-312i","xterm-312j","xterm-313","xterm-313a","xterm-313b","xterm-313c","xterm-313d","xterm-313e","xterm-313f","xterm-313g","xterm-313h","xterm-313i","xterm-313j","xterm-313k","xterm-314","xterm-314a","xterm-314b","xterm-314c","xterm-314d","xterm-314e","xterm-314f","xterm-314g","xterm-314h","xterm-314i","xterm-314j","xterm-314k","xterm-314l","xterm-314m","xterm-315","xterm-315a","xterm-315b","xterm-315c","xterm-316","xterm-316a","xterm-316b","xterm-316c","xterm-317","xterm-317-ross26-5","xterm-317-ross26-6","xterm-317a","xterm-317b","xterm-318","xterm-318a","xterm-318b","xterm-318c","xterm-318d","xterm-318e","xterm-318f","xterm-318g","xterm-318h","xterm-318i","xterm-319","xterm-319a","xterm-319b","xterm-320","xterm-320a","xterm-320b","xterm-320c","xterm-320d","xterm-320e","xterm-320f","xterm-321","xterm-322","xterm-322a","xterm-322b","xterm-322c","xterm-322d","xterm-322e","xterm-323","xterm-324","xterm-324b","xterm-324c","xterm-324d","xterm-324e","xterm-324f","xterm-324g","xterm-325","xterm-325a","xterm-325b","xterm-325c","xterm-325d","xterm-325e","xterm-325f","xterm-325g","xterm-325h","xterm-325i","xterm-325j","xterm-326","xterm-326a","xterm-326b","xterm-326c","xterm-326d","xterm-326e","xterm-327","xterm-327a","xterm-327b","xterm-327c","xterm-327d","xterm-327e","xterm-327f","xterm-327g","xterm-327h","xterm-327i","xterm-327j","xterm-327k","xterm-327l","xterm-327m","xterm-327n","xterm-327o","xterm-327p","xterm-327q","xterm-327r","xterm-327s","xterm-327t","xterm-327u","xterm-327v","xterm-327w","xterm-327x","xterm-327y","xterm-327z","xterm-327za","xterm-327zb","xterm-327zc","xterm-328","xterm-328a","xterm-328b","xterm-328c","xterm-328d","xterm-328e","xterm-328f","xterm-328g","xterm-329","xterm-329a","xterm-329b","xterm-329c","xterm-329d","xterm-329e","xterm-329f","xterm-329g","xterm-329h","xterm-329i","xterm-330","xterm-330a","xterm-330b","xterm-330c","xterm-330d","xterm-330e","xterm-330f","xterm-330g","xterm-330h","xterm-330i","xterm-330j","xterm-330k","xterm-330l","xterm-330m","xterm-330n","xterm-330o","xterm-330p","xterm-330q","xterm-330r","xterm-330s","xterm-330t","xterm-330u","xterm-330v","xterm-330w","xterm-330x","xterm-330y","xterm-330z","xterm-330za","xterm-331","xterm-331a","xterm-331b","xterm-331c","xterm-331d","xterm-331e","xterm-331f","xterm-331g","xterm-331h","xterm-331i","xterm-331j","xterm-331k","xterm-331l","xterm-332a","xterm-332b","xterm-332c","xterm-332d","xterm-332e","xterm-332f","xterm-332g","xterm-332h","xterm-332i","xterm-332j","xterm-333","xterm-333a","xterm-333b","xterm-333c","xterm-333d","xterm-333e","xterm-333f","xterm-333g","xterm-333h","xterm-333i","xterm-333j","xterm-333k","xterm-333l","xterm-333m","xterm-333n","xterm-333o","xterm-333p","xterm-333q","xterm-333r","xterm-333s","xterm-333t","xterm-333u","xterm-333v","xterm-333w","xterm-333x","xterm-333y","xterm-333z","xterm-333za","xterm-333zb","xterm-333zc","xterm-334","xterm-334a","xterm-335","xterm-335a","xterm-335b","xterm-335c","xterm-335d","xterm-335e","xterm-335f","xterm-335g","xterm-335h","xterm-335i","xterm-335j","xterm-335k","xterm-335l","xterm-335m","xterm-335n","xterm-335o","xterm-335p","xterm-335q","xterm-335r","xterm-336","xterm-336a","xterm-336b","xterm-337","xterm-337a","xterm-337b","xterm-337c","xterm-337d","xterm-337e","xterm-337f","xterm-337g","xterm-337h","xterm-337i","xterm-337j","xterm-337k","xterm-337l","xterm-337m","xterm-337n","xterm-337o","xterm-337p","xterm-337q","xterm-337r","xterm-337s","xterm-338","xterm-338a","xterm-339","xterm-339a","xterm-339b","xterm-340","xterm-340a","xterm-340b","xterm-340c","xterm-340d","xterm-340e","xterm-340f","xterm-340g","xterm-340h","xterm-341","xterm-341a","xterm-341b","xterm-342","xterm-342a","xterm-342b","xterm-342c","xterm-342d","xterm-342e","xterm-342f","xterm-342g","xterm-342h","xterm-343","xterm-343a","xterm-343b","xterm-343c","xterm-343d","xterm-343e","xterm-343f","xterm-343g","xterm-343h","xterm-343i","xterm-344","xterm-344a","xterm-344b","xterm-344c","xterm-344d","xterm-344e","xterm-344f","xterm-344g","xterm-344h","xterm-344i","xterm-344j","xterm-344k","xterm-344l","xterm-344m","xterm-344n","xterm-344o","xterm-344p","xterm-344q","xterm-344r","xterm-344s","xterm-344t","xterm-344u","xterm-344v","xterm-345","xterm-345a","xterm-345b","xterm-345c","xterm-345d","xterm-346","xterm-346a","xterm-346b","xterm-346c","xterm-346d","xterm-346e","xterm-346f","xterm-346g","xterm-346h","xterm-346i","xterm-346j","xterm-346k","xterm-346l","xterm-346m","xterm-346n","xterm-346o","xterm-346p","xterm-346q","xterm-347","xterm-347a","xterm-347b","xterm-347c","xterm-347d","xterm-347e","xterm-347f","xterm-347g","xterm-347h","xterm-347i","xterm-347j","xterm-347k","xterm-347l","xterm-348","xterm-348a","xterm-348b","xterm-348c","xterm-348d","xterm-348e","xterm-348f","xterm-348g","xterm-348h","xterm-348i","xterm-348j","xterm-348k","xterm-348l","xterm-348m","xterm-349","xterm-349a","xterm-349b","xterm-349c","xterm-349d","xterm-349e","xterm-349f","xterm-349g","xterm-349h","xterm-349i","xterm-349j","xterm-349k","xterm-349l","xterm-349m","xterm-350","xterm-350a","xterm-350b","xterm-350c","xterm-350d","xterm-350e","xterm-350f","xterm-350g","xterm-351","xterm-351a","xterm-351b","xterm-351c","xterm-351d","xterm-351e","xterm-351f","xterm-351g","xterm-351h","xterm-351i","xterm-351j","xterm-351k","xterm-351l","xterm-352","xterm-352a","xterm-352b","xterm-352c","xterm-352d","xterm-352e","xterm-352f","xterm-352g","xterm-353","xterm-353a","xterm-353b","xterm-353c","xterm-353d","xterm-353e","xterm-353f","xterm-353g","xterm-353h","xterm-353i","xterm-353j","xterm-353k","xterm-353l","xterm-353m","xterm-353n","xterm-353o","xterm-353p","xterm-353q","xterm-354","xterm-354a","xterm-354b","xterm-354c","xterm-354d","xterm-354e","xterm-355","xterm-355a","xterm-356","xterm-356a","xterm-356b","xterm-356c","xterm-356d","xterm-356e","xterm-356f","xterm-356g","xterm-356h","xterm-356i","xterm-356j","xterm-356k","xterm-356l","xterm-357","xterm-357a","xterm-357b","xterm-357c","xterm-358","xterm-358a","xterm-358b","xterm-358c","xterm-358d","xterm-358e","xterm-358f","xterm-358g","xterm-359","xterm-359a","xterm-359b","xterm-359c","xterm-359d","xterm-359e","xterm-359f","xterm-359g","xterm-359h","xterm-359i","xterm-360","xterm-360a","xterm-360b","xterm-360c","xterm-360d","xterm-360e","xterm-361","xterm-361a","xterm-361b","xterm-361c","xterm-361d","xterm-361e","xterm-362","xterm-362a","xterm-362b","xterm-362c","xterm-362d","xterm-362e","xterm-362f","xterm-362g","xterm-362h","xterm-363","xterm-363a","xterm-363b","xterm-363c","xterm-363d","xterm-363e","xterm-363f","xterm-363g","xterm-364","xterm-364a","xterm-365","xterm-365a","xterm-365b","xterm-365c","xterm-365d","xterm-365e","xterm-366","xterm-366a","xterm-366b","xterm-366c","xterm-366d","xterm-366e","xterm-366f","xterm-366g","xterm-366h","xterm-366i","xterm-40","xterm-41","xterm-42","xterm-43","xterm-44","xterm-45","xterm-46","xterm-47","xterm-48","xterm-49","xterm-50","xterm-51","xterm-52","xterm-53","xterm-54","xterm-55","xterm-56","xterm-57","xterm-58","xterm-59","xterm-60","xterm-61","xterm-62","xterm-63","xterm-64","xterm-65","xterm-66","xterm-67","xterm-69","xterm-70","xterm-71","xterm-72","xterm-73","xterm-74","xterm-75","xterm-76","xterm-77","xterm-78","xterm-79","xterm-80","xterm-81","xterm-82","xterm-83","xterm-84","xterm-85","xterm-86","xterm-87","xterm-88","xterm-89","xterm-90","xterm-91","xterm-92","xterm-93","xterm-94","xterm-95","xterm-96","xterm-97","xterm-98","xterm-99","xterm317c"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"9.0"}]},{"events":[{"introduced":"0"},{"last_affected":"33"}]}],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"Tekproc.c"},"id":"CVE-2021-27135-223fd415","digest":{"line_hashes":["226705682114956398685846114735549955514","284728283629381026560432301225281944672","241608671915037702564816113690035224637","323570788994934141974789437038625720627"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"target":{"file":"misc.c","function":"do_osc"},"deprecated":false,"signature_type":"Function","signature_version":"v1","id":"CVE-2021-27135-442b682a","digest":{"length":5505,"function_hash":"127070465904715510616392304427124691562"},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","id":"CVE-2021-27135-471317cc","target":{"file":"charproc.c"},"digest":{"line_hashes":["280709191846888646550698681540738961659","226705682114956398685846114735549955514","252451151152915977382280230916467996104","10135954149745406975362795339274391879","277590772243710789756231888917625886159","174385177254667704275054183006727246373","53974488310248005238152084537436460795","173589553026532778298841178527036107948","245376495834198285527382064015999749958","173086633510014195517003102476589093628","126134250880498267035722584537690813561","246935202716737391353200169750233309647","25488849075141521268775484257805824636","142483252976579474851934010566698720908","139861737739641820012893465514109610676","35336434664662403871308513023694792412","336722215932442192283583105186864187245","42610278977366364618731082774493205441","173935868830782842580687563221739320419","132646632278475381123183588689971022165","35528415697002637027048522596005520673","163896385807631309978555388515950618758","270749469705006858191819603330399319679","251086218256038773859123398299384091817","327814840434038343724647610298853355992","125318047365383961727906368687703028462","89364007982166668024592249696500602280","76345595754548076663452169411992688972","142237196402299753189105093320171887227","112462427709371277111883341953802868737","251751322705141133425265816393336719150","44181428827550637318129757331949376420","138583554742635123225587885490227240973","296347859757246977399321637291842699382","331112228688638702530361708818265249764","44804556427582153993162990961399443689","255075705172259867202060680002642899053","242201102045282095816070014016665359051","161504014374521074827468553238823683406","62167224929021692133398291641577335640","97792576252762103858176673296455761552","188518386540423457082943321359692898803","4010030047529690650657161002237509387","170429844822433222019863638475692183976","265642429328231205355322352150396228864","566120155691844787083730886144405939","318781887252173086121049918804735720421","288760628316193800053746590455149468151","31001497096229790573543894970126459707","81629981202481641297688391414516636433","121158407101533118064873197736492790259","328949005260222758869859776995115540211","95803741572572839564073036712838260904","178936421502492694060234835568300898361","130799906630688719493223679374798669717","172139263653526526245267282958032138394","44028362625048614664140459644367332830","64643268354849795983592409872499113300","122274706139804331759796242852332387472","112467043421239801377616973728905961372","173190449677022640434018764058112020820","292648278138743617897745305703950416350","253643342136526512846268874806508528014","333978298987779596323201183069626701489","216271558675049484966825530321862216406","126586841998529848930115536787431908975","74195884169200568559979400402491829655","219554785980094828698571268163678268141","234094167595483306867763415226646486640","272258221669919149943668383096599983356","188151475264752820104339306277638615008","168864237646517475504032317660512803681","211190162928353430486334285500308467021","68006722170955113957990986971196745822","202170362119682739512248022105016137546","90183885948604087333555714557401408415","225713318487517140581097520855122642583","20779807987129472637393645037935954467","8555656639096673522124277596235780768","107848635794427224205086204070887237157","55607047985036484036875784247285761191","19407283166991346465733764266579362668","269831868574013710387532245517662641913","305873431664383801242991232791794894259","119690949727642525870798466532460136562","115674793925800716433111584148518256067","42388429598614212417229567592697135908","27686782013739405594270920347072748656","200503559919357271827110291412716128119","202072486762941197433772872420492429506","320568157561534497948807577240281571807","297141469878859343758252897636692040847","295050438991641194704303978579421242000","7779604003790456517600010536715191169","53989348763585805394653215705198856161","105525445379191043382632706209937292420","130200154395047468222393443248673822842","27415475902297350147583370932308424672","49772709835657089767198105488361424477","216467639844748230019343895018497927264","75407180318704451699303769443305508093","90477121491718072060675061028638773452","191030403299871298014566886997312975349","91897649930860484013527677932862903122","221557650087221816721450107098278273776","314182889167994855520297096869940242060","233742460839799911164694397791771787804","92992936326423504256595606335022989156","76150989215642726683055508043933882294","297351737832971894903132365115813047057","46407220122534395588725652540513742479","162715171557179896394990430410557061413","238304738011719532965800634373990047382","302022918288066779705265462234806472579","50454500332394559061493709160560951513","132862363900470642506475538916476013541","117275589977115262562043201440625547685","240179583190321960351791869679455866464","308354752515490222436564410869102882039","73146341374928373682985806236359380466","23100321799526649971876323936718951404","286380862032246547213927278484022572308","186312216781839157033853547843247766171","278111340395685396375904314703291508756","276747299094217873686489012647527382964","239129070115456954964455470179078691136","94568802784762704550233800450964626976","230277815541096321488591233567837510974"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"misc.c"},"id":"CVE-2021-27135-4e6f5470","digest":{"line_hashes":["72694500207652297460808975945920711998","237277466881759296733375356513690493662","132372491384466679160873286837148254468","25642798928886029874802640767733127514","164099848433969166646613279799361929758","11014560221248064822611044629765564826","166189383573761758535097672793290215162","292855935639810985574292297011019046247","242588665069743278023405742694201145802","335841484031831615446560039007916277002","279375914903389234077515323111672098760","35249907194928438438649930394979921809","199419639856679820078998993453425914001","294715299407343097179856512219342483653","124300979861186525391169235801636455666","273090677168433207561407823756685399475","320282322418498883705653542003546244001","904214065557976163728780212774673152","272616020005234441870020148691686446685","64350548646897784199941918243033906684","322791353177174351544891449059044585802","131108580668779217662110309791956931455","10586811697175077733522694352235028330","62939959249465580221867296832178140075","212124477098067225793221045248986250543","120157485888596235695887349082134428958","232409331780280012946627685493404962739","155265610836499417979603110690304762676","43646782729099435162389060024828976552","39621670562495537492485562899984857698","2385508016753122030196617902617345398","272612776165544630405170437683837471556","333066387766028434900340732608904101606","317678915728580348284282405075548053451","2570133880513437493917470134510619628"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"CVE-2021-27135-4f6855df","target":{"file":"misc.c","function":"xtermDisplayCursor"},"digest":{"length":472,"function_hash":"47534819152559570497781849344156927115"},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"util.c"},"id":"CVE-2021-27135-83557bd6","digest":{"line_hashes":["204929593908884127775469947004160956522","131684641695888650661256718546890082159","126809655382010135009867701658079097622","156776681246202259308070176035265963334","326289920574651518901024125105438327443"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"button.c"},"id":"CVE-2021-27135-a2bc9fb9","digest":{"line_hashes":["277148843522247792063794214364607991703","16818336402220346127488010570367314038","323236449147721195249215930107085499439","297085073382815427472032307678603587892","74882116455560791166794663649655751526","325103990340651829762690253465184086568","203997351473975185562593409991130104445","215591782777490406855907464249939362306","15713256378289495295718885869035554783","153906715426697823211501509374258167069","155637593777033425502821384904868628191","307720885783947251490436529083262210094","323820652969859190218317359477985534990","101295488949237601696279946418004577908","99940377818103097677378623059282468999"],"threshold":0.9},"source":"https://github.com/thomasdickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c"},{"target":{"file":"xterm.h"},"deprecated":false,"signature_type":"Line","signature_version":"v1","id":"CVE-2021-27135-b18f0f2d","digest":{"line_hashes":["199534115992065564062393482320705016279","304203568142421823906187627845949395047","317617454335689720228507120511803656060","107654739791241878775791045606133387624","35491446974216053249343433928397806785","122953575330822752808876735713250609564","252379642032017967221479357510032159835","132964942495668331078005948237477484694","247978921328329023575986872304006956809","204893840609433687165312711662396160191","86808312559954287772236679031657804377"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"charproc.c","function":"VTRealize"},"id":"CVE-2021-27135-d6e90df3","digest":{"length":10120,"function_hash":"163015194264236923837560198250029256481"},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","id":"CVE-2021-27135-dc32bf18","target":{"file":"main.c"},"digest":{"line_hashes":["32796789806284024275639916408541358210","197224394363200850893404218805619087214","230267144874948808801123221530937563224","89732657109155903477984755739502864958"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"ptyx.h"},"id":"CVE-2021-27135-e1a347ec","digest":{"line_hashes":["323128627578147688109374271103488750544","55011328144653014196309963490386341495","174647039267080340667723307985374464576","253745108644445579663293773628509748856","284346489832229756364550425661057521884","127108674938365114279541143415763451261","273483264447646730812749789235149892426","89054066494610616194240864867014990756","312784913356344527860258683952786130238","83234689361834355370391707682737808410","338580243167605740160088853352923993522","47552319049112998642253747127800896038","172384635736661599305534344939471289138"],"threshold":0.9},"source":"https://github.com/ThomasDickey/xterm-snapshots/commit/a8fc74f3bcca38d5a288c9947f3e9d48868a3a3f"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"CVE-2021-27135-f415546d","target":{"file":"button.c","function":"SaltTextAway"},"digest":{"length":2116,"function_hash":"98433897814228501755533246292104164193"},"source":"https://github.com/thomasdickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c"}],"vanir_signatures_modified":"2026-04-11T13:54:03Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27135.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}