Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

TTSSH2 plugin of Tera Term provided by TeraTerm Project contains the following vulnerabilities:<a href='https://cwe.mitre.org/data/definitions/196.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/130.html' target='_blank'></a><ul><li>Unsigned to Signed Conversion Error (CWE-196) - CVE-2026-58317</li><li>Improper Handling of Length Parameter Inconsistency (CWE-130) - CVE-2026-60060</li></ul>CVE-2026-58317 Yukihiro Nakamura reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-60060 TeraTerm Project reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.