vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-11623

tmux image.c image_free use after free

MEDIUM
4.5
CVSS Score
Published: June 9, 2026 at 03:15 AM UTC
Updated: July 23, 2026 at 07:32 PM UTC
1 product affected across 1 vendorTmux

Using tmux by N/A?

Get instant alerts when new vulnerabilities affect tmux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM4.5
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 3.7-rc is able to address this issue. The name of the patch is fc6d94a9f8a593bd8b7031650802084385d4ee03. The affected component should be upgraded.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tmux· Tmux
60%
3.6a
Vendor states this is fixed in 3.7-rc (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

VDB EntryTechnical Description
Source: cverecord
https://vuldb.com/vuln/369303
SignaturePermissions Required
Source: cverecord
https://vuldb.com/vuln/369303/cti
Third Party Advisory
Source: cverecord
https://vuldb.com/cve/CVE-2026-11623
Third Party Advisory
Source: cverecord
https://vuldb.com/submit/835623
Exploit
Source: cverecord
https://gist.github.com/XlabAITeam/f0d9952595f795129a3258ba73bbc3cb
Patch
Source: cverecord
https://github.com/tmux/tmux/commit/fc6d94a9f8a593bd8b7031650802084385d4ee03
Patch
Source: cverecord
https://github.com/tmux/tmux/releases/tag/3.7-rc
Product
Source: cverecord
https://github.com/tmux/tmux/

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.5MEDIUMVulDB
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-416CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card