CVE WatchJul 17, 2026

CVE-2026-58317

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Ter

CVSS

6.3

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 17, 2026 · Last modified: Jul 17, 2026 · CWE-196

EPSS · 30d

Not enough EPSS history yet.

Technical description

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-144549.8 CRI

31.6%

——9Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.7d