Every CVE Search/ Get API key

CVE-2025-69720

ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...

7.3 HighPublic exploitFix available

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
Low

Exploit likelihood

0.47%Up 0.5 points since Mar 20, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.3

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
CVE-2025-69720
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-121, CWE-120
Updated
2026-11-02
EUVDEUVD-2025-208879 9.8

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
EUVD-2025-208879
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-9952-mrqj-h4jh 9.8

ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...

ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().

Record
GHSA-9952-mrqj-h4jh
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-120, CWE-121
Updated
2026-11-02
NVD 7.3

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
CVE-2025-69720
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-121, CWE-120
Updated
2026-11-02
OSVBELL-CVE-2025-69720 7.8
Record
BELL-CVE-2025-69720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-69720 7.8

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
DEBIAN-CVE-2025-69720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 29 moreShow less
OSVJLSEC-2026-1242 7.8

ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
JLSEC-2026-1242
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1807 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1807
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1808 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1809 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1904 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1904
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1905 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1906 7.8

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)

Record
OESA-2026-1906
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26357 7.8

Red Hat Security Advisory: ncurses security update

Record
RHSA-2026:26357
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:5913 7.8

Red Hat Security Advisory: ncurses security update

Record
RHSA-2026:5913
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7263 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7263
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:5913 7.8

Moderate: ncurses security update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

  • ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:5913
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-69720 7.8

CVE-2025-69720 in ncurses - Patched by Root

Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-69720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-69720 7.8

CVE-2025-69720 in ncurses - Patched by Root

Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-69720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-69720 7.8

CVE-2025-69720 in ncurses - Patched by Root

Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-69720
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-69720 9.8

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
UBUNTU-CVE-2025-69720
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVALSA-2026:5913 No score

Moderate: ncurses security update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

  • ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:5913
Updated
2026-11-02
OSVAZL-80469 No score

CVE-2025-69720 affecting package ncurses for versions less than 6.4-3

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Record
AZL-80469
Updated
2026-11-05
OSVCLSA-2026-1776163577 No score

ncurses: Fix of CVE-2025-69720

  • CVE-2025-69720: add a limit-check in infocmp -i option's analyze_string function to prevent stack-based buffer overflow (from upstream ncurses 6.5 patchlevel 20251213)
Record
CLSA-2026-1776163577
Updated
2026-11-02
OSVCLSA-2026-1777445825 No score

ncurses: Fix of CVE-2025-69720

  • CVE-2025-69720: add a limit-check in infocmp -i option's analyze_string function to prevent stack-based buffer overflow (from upstream ncurses 6.5 patchlevel 20251213)
Record
CLSA-2026-1777445825
Updated
2026-11-02
OSVCLSA-2026-1777480556 No score

Fix CVE(s): CVE-2025-69720

  • SECURITY UPDATE: stack-based buffer overflow in infocmp
    • debian/patches/CVE-2025-69720.patch: add a bounds check on strlen(cp) in analyze_string() in progs/infocmp.c and grow buf2 by one byte so a maliciously long SGR parameter list can no longer overflow the stack buffer.
    • CVE-2025-69720
Record
CLSA-2026-1777480556
Updated
2026-11-02
OSVCLSA-2026-1787663865 No score

Fix CVE(s): CVE-2025-69720

  • SECURITY UPDATE: stack buffer overflow in the infocmp -i option
    • debian/patches/CVE-2025-69720.patch: in analyze_string() in progs/infocmp.c, clamp the copy length taken from strlen(cp) to MAX_TERMINFO_LENGTH and grow buf2 by one byte for the terminating NUL, so an over-long capability string can no longer overflow the fixed-size stack buffer.
    • CVE-2025-69720
Record
CLSA-2026-1787663865
Updated
2026-11-02
OSVopenSUSE-SU-2026:20992-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
openSUSE-SU-2026:20992-1
Updated
2026-11-02
OSVSUSE-SU-2026:1499-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:1499-1
Updated
2026-11-02
OSVSUSE-SU-2026:1510-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:1510-1
Updated
2026-11-02
OSVSUSE-SU-2026:21247-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:21247-1
Updated
2026-11-02
OSVSUSE-SU-2026:21261-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:21261-1
Updated
2026-11-02
OSVSUSE-SU-2026:22228-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:22228-1
Updated
2026-11-02
OSVSUSE-SU-2026:22294-1 No score

Security update for ncurses

This update for ncurses fixes the following issue:

  • CVE-2025-69720: buffer overflow in function analyze_string()of progs/infocmp.c (bsc#1259924).
Record
SUSE-SU-2026:22294-1
Updated
2026-11-02
OSVUSN-8503-1 No score

ncurses vulnerability

It was discovered that ncurses incorrectly handled certain terminfo entries in the infocmp tool. An attacker could possibly use this issue to cause a denial of service via a crafted terminfo file.

The default compiler options for affected releases should reduce the vulnerability to a denial of service.

Record
USN-8503-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ncurses-base
AlmaLinux:10
 before 6.4-15.20240127.el10_1
6.4-15.20240127.el10_1
ncurses-term
AlmaLinux:10
 before 6.4-15.20240127.el10_1
6.4-15.20240127.el10_1
ncurses
Azure Linux:3
 before 6.4-3
6.4-3
ncurses
Alpaquita:23
 6.3_p20221119-r0 up to 6.3_p20221119-r3
6.3_p20221119-r3
ncurses
Alpaquita:25
 6.5_p20250503-r0 up to 6.5_p20250503-r1
6.5_p20250503-r1
ncurses
Alpaquita:stream
 6.4_p20230603-r0 up to 6.6_p20251231-r0
6.6_p20251231-r0
ncurses
BellSoft Hardened Containers:23
 6.3_p20221119-r0 up to 6.3_p20221119-r3
6.3_p20221119-r3
ncurses
BellSoft Hardened Containers:25
 6.5_p20250503-r0 up to 6.5_p20250503-r1
6.5_p20250503-r1
ncurses
BellSoft Hardened Containers:stream
 6.4_p20230603-r0 up to 6.6_p20251231-r0
6.6_p20251231-r0
ncurses
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
Show 119 moreShow less
Affected packages
PackageAffectedFixed
ncurses-base
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-devel
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-libs
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-static
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-term
TuxCare:CentOS:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-base
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-devel
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-libs
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-static
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
ncurses-term
TuxCare:OracleLinux:7
 before 5.9-14.20130511.el7_4.tuxcare.els3
5.9-14.20130511.el7_4.tuxcare.els3
lib32ncurses-dev
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
lib32ncurses6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
lib32ncursesw6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
lib32tinfo6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncurses-dev
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncurses5
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncurses5-dev
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncurses6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncursesw5
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncursesw5-dev
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libncursesw6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libtinfo-dev
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libtinfo5
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
libtinfo6
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
ncurses-base
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
ncurses-bin
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
ncurses-doc
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
ncurses-examples
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
ncurses-term
TuxCare:Debian:10
 before 6.1+20181013-2+deb10u5+tuxcare.els1
6.1+20181013-2+deb10u5+tuxcare.els1
lib32ncurses5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
lib32ncurses5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
lib32ncursesw5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
lib32ncursesw5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
lib32tinfo-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
lib32tinfo5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libncurses5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libncurses5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libncursesw5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libncursesw5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libtinfo-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libtinfo5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32ncurses5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32ncurses5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32ncursesw5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32ncursesw5-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32tinfo-dev
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
libx32tinfo5
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses-base
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses-bin
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses-doc
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses-examples
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses-term
TuxCare:Ubuntu:18.04
 before 6.1-1ubuntu1.18.04.1+tuxcare.els1
6.1-1ubuntu1.18.04.1+tuxcare.els1
ncurses
Debian:12
 All versions, plus listed versions
6.4+20230603-16.4+20230625-16.4+20230625-26.4+20231007-16.4+20231016-1
Show 19 moreShow less
6.4+20231118-16.4+20231121-16.4+20231209-16.4+20240113-16.4+20240414-16.4-46.5+20250125-16.5+20250125-26.5+20250216-16.5+20250216-26.5+20251115-16.5+20251115-26.5+20251122-16.5+20251123-16.5-16.5-26.6+20251231-16.6+20260608-16.6+20260608-2
 None known
ncurses
Debian:13
 All versions, plus listed versions
6.5+20250216-26.5+20251115-16.5+20251115-26.5+20251122-16.5+20251123-16.6+20251231-16.6+20260608-16.6+20260608-2
 None known
ncurses
Debian:14
 before 6.6+20251231-1, plus listed versions
6.5+20250216-26.5+20251115-16.5+20251115-26.5+20251122-16.5+20251123-1
6.6+20251231-1
Ncurses_jll
Julia
 before 6.6.0+0
6.6.0+0
ncurses
openEuler:20.03-LTS-SP4
 before 6.2-8.oe2003sp4
6.2-8.oe2003sp4
ncurses
openEuler:22.03-LTS-SP4
 before 6.3-17.oe2203sp4
6.3-17.oe2203sp4
ncurses
openEuler:24.03-LTS
 before 6.4-11.oe2403
6.4-11.oe2403
ncurses
openEuler:24.03-LTS-SP2
 before 6.4-12.oe2403sp2
6.4-12.oe2403sp2
ncurses
openEuler:24.03-LTS-SP3
 before 6.4-12.oe2403sp3
6.4-12.oe2403sp3
ncurses
openEuler:24.03-LTS-SP1
 before 6.4-12.oe2403sp1
6.4-12.oe2403sp1
ncurses-c++-libs
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-c++-libs-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-devel
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-libs-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-term
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-base
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-libs
Red Hat:enterprise_linux_eus:10.0
 before 0:6.4-14.20240127.el10_0.1
0:6.4-14.20240127.el10_0.1
ncurses-c++-libs
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-c++-libs-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-debugsource
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-devel
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-libs-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-term
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-base
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses-libs
Red Hat:enterprise_linux:10.1
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-base
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-c++-libs
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-compat-libs
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-devel
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-libs
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-static
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses-term
Red Hat:hummingbird:1
 before 0:6.6-1.1.hum1
0:6.6-1.1.hum1
ncurses
Rocky Linux:10
 before 0:6.4-15.20240127.el10_1
0:6.4-15.20240127.el10_1
ncurses
Root:Debian:11
 before 6.2+20201114-2+deb11u2.root.io.6
6.2+20201114-2+deb11u2.root.io.66.2+20201114-2+deb11u2.aikido.76.2+20201114-2+deb11u2.root.io.5
rootio-ncurses
Root:Debian:11
 before 6.2+20201114-2+deb11u2.root.io.6
6.2+20201114-2+deb11u2.root.io.66.2+20201114-2+deb11u2.aikido.76.2+20201114-2+deb11u2.root.io.5
ncurses
Root:Debian:12
 before 6.4-4.root.io.5
6.4-4.root.io.56.4-4.root.io.66.4-4.aikido.7
rootio-ncurses
Root:Debian:12
 before 6.4-4.root.io.5
6.4-4.root.io.56.4-4.root.io.66.4-4.aikido.7
ncurses
Root:Debian:13
 before 6.5+20250216-2.aikido.3
6.5+20250216-2.aikido.36.5+20250216-2.root.io.26.5+20250216-2.root.io.1
rootio-ncurses
Root:Debian:13
 before 6.5+20250216-2.aikido.3
6.5+20250216-2.aikido.36.5+20250216-2.root.io.26.5+20250216-2.root.io.1
ncurses
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 5.9-91.1
5.9-91.1
ncurses
SUSE:Linux Enterprise Micro 5.3
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Micro 5.4
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Micro 5.5
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Enterprise Micro 5.2
 before 6.1-150000.5.33.1
6.1-150000.5.33.1
ncurses
SUSE:Linux Micro 6.0
 before 6.4.20240224-11.1
6.4.20240224-11.1
ncurses
SUSE:Linux Micro 6.1
 before 6.4.20240224-slfo.1.1_2.1
6.4.20240224-slfo.1.1_2.1
ncurses
SUSE:Linux Micro 6.2
 before 6.5.20250531-160000.3.1
6.5.20250531-160000.3.1
ncurses
SUSE:Linux Enterprise Server 16.0
 before 6.5.20250531-160000.3.1
6.5.20250531-160000.3.1
ncurses
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.5.20250531-160000.3.1
6.5.20250531-160000.3.1
ncurses
Ubuntu:Pro:14.04:LTS
 before 5.9+20140118-1ubuntu1+esm6, plus listed versions
5.9+20130608-1ubuntu15.9+20131221-1ubuntu15.9+20140118-1ubuntu15.9+20140118-1ubuntu1+esm15.9+20140118-1ubuntu1+esm25.9+20140118-1ubuntu1+esm35.9+20140118-1ubuntu1+esm45.9+20140118-1ubuntu1+esm5
5.9+20140118-1ubuntu1+esm6
ncurses
Ubuntu:Pro:16.04:LTS
 before 6.0+20160213-1ubuntu1+esm6, plus listed versions
5.9+20150516-2ubuntu16.0+20151024-2ubuntu16.0+20151024-2ubuntu26.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm1
Show 4 moreShow less
6.0+20160213-1ubuntu1+esm26.0+20160213-1ubuntu1+esm36.0+20160213-1ubuntu1+esm46.0+20160213-1ubuntu1+esm5
6.0+20160213-1ubuntu1+esm6
ncurses
Ubuntu:Pro:18.04:LTS
 before 6.1-1ubuntu1.18.04.1+esm3, plus listed versions
6.0+20160625-1ubuntu16.0+20171125-1ubuntu16.1-1ubuntu16.1-1ubuntu1.18.046.1-1ubuntu1.18.04.16.1-1ubuntu1.18.04.1+esm16.1-1ubuntu1.18.04.1+esm2
6.1-1ubuntu1.18.04.1+esm3
ncurses
Ubuntu:Pro:20.04:LTS
 before 6.2-0ubuntu2.1+esm1, plus listed versions
6.1+20190803-1ubuntu16.1+20191019-1ubuntu16.2-0ubuntu26.2-0ubuntu2.1
6.2-0ubuntu2.1+esm1
ncurses
Ubuntu:22.04:LTS
 before 6.3-2ubuntu0.2, plus listed versions
6.2+20201114-2build16.2+20201114-2build26.3-16.3-26.3-2ubuntu0.1
6.3-2ubuntu0.2
ncurses
Ubuntu:24.04:LTS
 before 6.4+20240113-1ubuntu2.1, plus listed versions
6.4+20230625-26.4+20231016-16.4+20231121-1build16.4+20231209-16.4+20240113-1ubuntu16.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.1
ncurses
Ubuntu:25.10
 before 6.5+20250216-2ubuntu0.1, plus listed versions
6.5+20250216-26.5+20250216-2build1
6.5+20250216-2ubuntu0.1
ncurses
openSUSE:Leap 16.0
 before 6.5.20250531-160000.3.1
6.5.20250531-160000.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubCao-Wuhui/CVE-2025-697202025-12-11

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-69720 is a high vulnerability (CVSS 7.3) in Gnu Ncurses, published March 19, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in ncurses-base 6.4-15.20240127.el10_1.

References

Show 39 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open