VT-Fuzz: Sixel & Control Sequence Vulnerability Tester for Terminal Emulators

Modern terminal emulators supporting rich graphics protocols (Sixel, DECSLRM, DECGRI) regularly suffer from memory safety vulnerabilities like heap buffer overflows and segfaults due to unclamped sequence parameters and integer wrapping during buffer allocations.

Maintainers of C, Rust, and Go terminal emulators, TUI authors, and systems security engineers.

• codeberg — heap buffer overflow in sixel.c — ### Foot Version 1.27 ### TERM environment variable foot ### Compositor Name and Version sway 1.11 ### Distribution Arch ### Terminal multiplexer _No response_ ### Shell, TUI, application fish ### Server/standalone mode - [x] Standalone - [x] Server ##...
• codeberg — [Discussion]: Help with handling a move? — ### Discussion Topic Hello, I am back again. I come with good news, I managed to get the repository to fork! So I can add things. I come with some bad news though. I was looking for an accessibility tool to help me with my memory, and while looking at M...
• codeberg — Heap-buffer-overflow in sixel_add_many_generic / sixel_add_many_ar_11 — ### Foot Version 1.27.0 ### TERM environment variable foot ### Compositor Name and Version sway 1.11 ### Distribution arch ### Terminal multiplexer _No response_ ### Shell, TUI, application _No response_ ### Server/s...
• codeberg — Native ABI detection is insufficient for the `arch_os` case — https://codeberg.org/ziglang/zig/src/commit/e2669015901e52069a9fdc82bb44e21119dcceab/lib/std/zig/system.zig#L990-L993 This path is taken for NetBSD. This is problematic because NetBSD has at least the following targets that differ only...
• codeberg — Add support for DECSLRM — ### Describe your feature request Hey, while taking vtebench benchmarks find out a massive drop in performance running inside the tmux session, results as follow: ``` # results outside tmux: cursor_motion (1359 samples @ 1.89 MiB): 6.79ms avg (90% < 8ms) +-0.83ms ...
• codeberg — Exercise 65 Broken error: no field named 'Struct' in union 'builtin.Type' — After the changes in https://github.com/ziglang/zig/pull/21225 Exercise 65 is broken ``` zig build -Dn=65 _ _ _ ___(_) __ _| (_)_ __ __ _ ___ |_ | |/ _' | | | '_ \ / _' / __| / /| |...
• codeberg — Segfault in set_pivot_point_for_block_and_char_wise — ### Foot Version foot version: 1.27.0 -pgo +ime +graphemes +toplevel-tag +blur -assertions ### TERM environment variable tmux-256color ### Compositor Name and Version river 0.3 ### Distribution Fedora 44 ### Terminal multiplexer tmux ##...

• codeberg[Discussion]: Help with handling a move?
• codebergNative ABI detection is insufficient for the `arch_os` case
• codebergSegfault in set_pivot_point_for_block_and_char_wise
• codebergHeap-buffer-overflow in sixel_add_many_generic / sixel_add_…
• codebergheap buffer overflow in sixel.c
• codebergAdd support for DECSLRM
• codebergExercise 65 Broken error: no field named 'Struct' in union…

• edex-ui — edex-ui provides A cross-platform, customizable science fiction terminal emulator with advanced monitoring & touchscr, but lacks a dedicated automated harness for this specific problem statement.
• gameboy.live — gameboy.live provides 🕹️ A basic gameboy emulator with terminal "Cloud Gaming" support, but lacks a dedicated automated harness for this specific problem statement.
• twin — twin provides Text mode window environment. A terminal emulator and multiplexer with mouse support, overlapped win, but lacks a dedicated automated harness for this specific problem statement.

Here's what exists and where the opening is.

Checked September 4, 2026