CVE-2024-38396

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the built-in tmux integration feature (enabled by default), allows an attacker to inject arbitrary code into the terminal, a different vulnerability than CVE-2024-38395.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
gnachman	iterm2	>= 3.5.0, < 3.5.2

References

Timeline

Published: Jun 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-383977.5Transient DOS while parsing probe response and assoc response frame.CVE-2024-383997.8Memory corruption while processing user packets to generate page faults.CVE-2024-38407.5Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation res CVE-2024-384017.8Memory corruption while processing concurrent IOCTL calls.CVE-2024-384027.8Memory corruption while processing IOCTL call for getting group info.CVE-2024-384036.5Transient DOS while parsing BTM ML IE when per STA profile is not included.CVE-2024-384047.5Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.CVE-2024-384056.5Transient DOS while processing the CU information from RNR IE.CVE-2024-384067.0Memory corruption while handling IOCTL calls in JPEG Encoder driver.CVE-2024-384077.0Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.CVE-2024-384089.1Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.CVE-2024-384097.8Memory corruption while station LL statistic handling.