PT-2026-47004 · Julia · Tmux Jll

Published 2026-05-26 · Updated 2026-05-26

OSV

In tmux before version 3.1c the function input csi dispatch sgr colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Related Identifiers

JLSEC-2026-528

Affected Products

Tmux Jll

References · 5

• https://osv.dev/vulnerability/JLSEC-2026-528 · Vendor Advisory
• https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c · Note
• https://raw.githubusercontent.com/tmux/tmux/3.1c/CHANGES · Note
• https://openwall.com/lists/oss-security/2020/11/05/3 · Note
• https://security.gentoo.org/glsa/202011-10 · Note