{"id":"CVE-2023-40359","details":"xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.","modified":"2026-03-14T12:17:11.916170Z","published":"2023-08-14T17:15:10.617Z","related":["SUSE-SU-2023:4438-1","openSUSE-SU-2024:13240-1"],"references":[{"type":"ADVISORY","url":"https://invisible-island.net/xterm/xterm.log.html#xterm_380"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"380"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40359.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}