Heap Buffer Vulnerability in Kitty Terminal by Kovid Goyal

CVE-2026-33642

What is CVE-2026-33642?

In versions prior to 0.47.0, Kitty Terminal contains a vulnerability that affects the handle_compose_command() function due to improper bounds validation. Specifically, it utilizes unsigned 32-bit arithmetic which is vulnerable to integer wrapping. This vulnerability enables an attacker to craft malicious escape sequences that manipulate composition offsets, leading to significant out-of-bounds memory access in compose_rectangles(). This security flaw can be exploited without any user interaction and does not require any special configuration, making it particularly dangerous for users of affected versions.

References