CVE-2022-45872 - iTerm2 before 3.4.18 mishandles a DECRQSS response

CRITICAL

iTerm2 before 3.4.18 mishandles a DECRQSS response

Published Nov 23, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.94%

iTerm2 before 3.4.18 mishandles a DECRQSS response.

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
https://iterm2.com/downloads.html		Release NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 23, 2022

Updated Apr 25, 2025

Reserved Nov 23, 2022

Updated Apr 25, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a