CVE-2018-25253

MediumCVSS 6.2

Published: 04/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field. Local attackers can cause a denial of service by pasting a 2000-byte string into this field, crashing the application.

Risk Assessment

An attacker with local access can crash the application, disrupting the user's work.

Recommendation

Update Termite to a patched version.

Original NVD description (English source)

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessively long string. Attackers can paste a 2000-byte payload into the Settings User interface language field to crash the application.