Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 3.7-rc is able to address this issue. The name of the patch is fc6d94a9f8a593bd8b7031650802084385d4ee03. The affected component should be upgraded.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-11623: tmux: Crash by causing SIXEL images to be removed when in the alternate screen https://www.openwall.com/lists/oss-security/2026/06/15/7 only if tmux is built with --enable-sixel
Post summary
The post announces a new CVE affecting tmux that triggers a crash related to SIXEL images, providing initial technical details but lacking evidence of exploitation or patches.
⚡ Alerta #openSUSE: CVE-2026-11623 no tmux permite crash e potencial execução de código via imagem Sixel. Versões até 3.6a afetadas. Saiba mais: -> http://tinyurl.com/mtextf3m https://t.co/M5f9bsv0P4
Post summary
OpenSUSE alerts users that CVE‑2026‑11623 in tmux can cause crashes and possible code execution through Sixel images, affecting versions up to 3.6a.