Termite Buffer Overflow Vulnerability Leading to Denial-of-Service

Vulnerability

A buffer overflow vulnerability has been identified in Termite version 3.4, specifically within the User Interface language settings field. This vulnerability allows local attackers to cause a denial-of-service condition by entering an excessively long string. By pasting a 2000-byte payload into the language settings field, attackers can crash the application.

Impact

Exploitation of this vulnerability leads to a crash of the Termite application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, paste a 2000-byte payload into the 'User interface language' field in the settings. After clicking 'OK', the application will crash.

Added: Apr 4, 2026, 2:18 PM
Updated: Apr 4, 2026, 2:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
4.6
remediation
0.0
relevance
5.4
threat
6.4
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.