CVE-2025-6141
GNU ncurses parse_entry.c postprocess_termcap stack-based overflow
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
GNU ncurses parse_entry.c postprocess_termcap stack-based overflow
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
CVE-2025-6141- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C - CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C - CVSS 2.0
- 1.7
AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C - Weakness
- CWE-121, CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2025-18429
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
EUVD-2025-18429- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wfwf-ggr2-rpjf
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic....
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
GHSA-wfwf-ggr2-rpjf- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
CVE-2025-6141- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 1.7 Low
AV:L/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-119, CWE-121
- Updated
- 2026-11-02
OSVBELL-CVE-2025-6141
- Record
BELL-CVE-2025-6141- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
CVE-2025-6141- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2025-6141
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
DEBIAN-CVE-2025-6141- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVJLSEC-2026-454
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
JLSEC-2026-454- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 2.0
- 1.7 Low
AV:L/AC:L/Au:S/C:N/I:N/A:P - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-1851
ncurses security update
The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.
Security Fix(es):
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.(CVE-2025-6141)
- Record
OESA-2025-1851- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-6141
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
UBUNTU-CVE-2025-6141- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-64139 No score
CVE-2025-6141 affecting package ncurses for versions less than 6.4-3
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
- Record
AZL-64139- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-6141 No score
CVE-2025-6141 in ncurses - Patched by Root
Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2025-6141- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-6141 No score
CVE-2025-6141 in ncurses - Patched by Root
Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-6141- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-6141 No score
CVE-2025-6141 in ncurses - Patched by Root
Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2025-6141- Updated
- 2026-11-02
OSVUSN-8709-1 No score
ncurses vulnerability
It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service.
- Record
USN-8709-1- Updated
- 2026-11-02
Affected products
- gnu ncurses
- siemens ruggedcom rst2428p
- siemens scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family
- siemens scalance xch328
- siemens scalance xcm324
- siemens scalance xcm328
- siemens scalance xcm332
- siemens scalance xrh334 (24 v dc, 8xfo, cc)
- siemens scalance xrm334 (230 v ac, 12xfo)
- siemens scalance xrm334 (230 v ac, 8xfo)
- siemens scalance xrm334 (230v ac, 2x10g, 24xsfp, 8xsfp+)
- siemens scalance xrm334 (24 v dc, 12xfo)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ncursesAzure Linux:3 |
before 6.4-3 | 6.4-3 |
ncursesAlpaquita:23 |
6.3_p20221119-r0 up to 6.3_p20221119-r2 | 6.3_p20221119-r2 |
ncursesAlpaquita:stream |
6.4_p20230603-r0 up to 6.5_p20250405-r0 | 6.5_p20250405-r0 |
ncursesBellSoft Hardened Containers:23 |
6.3_p20221119-r0 up to 6.3_p20221119-r2 | 6.3_p20221119-r2 |
ncursesBellSoft Hardened Containers:stream |
6.4_p20230603-r0 up to 6.5_p20250405-r0 | 6.5_p20250405-r0 |
ncursesDebian:12 |
All versions, plus listed versions 6.4+20230603-16.4+20230625-16.4+20230625-26.4+20231007-16.4+20231016-1 Show 19 moreShow less6.4+20231118-16.4+20231121-16.4+20231209-16.4+20240113-16.4+20240414-16.4-46.5+20250125-16.5+20250125-26.5+20250216-16.5+20250216-26.5+20251115-16.5+20251115-26.5+20251122-16.5+20251123-16.5-16.5-26.6+20251231-16.6+20260608-16.6+20260608-2 |
None known |
ncursesDebian:13 |
All versions, plus listed versions 6.5+20250216-26.5+20251115-16.5+20251115-26.5+20251122-16.5+20251123-16.6+20251231-16.6+20260608-16.6+20260608-2 |
None known |
ncursesDebian:14 |
before 6.5+20251115-2, plus listed versions 6.5+20250216-26.5+20251115-1 |
6.5+20251115-2 |
Ncurses_jllJulia |
before 6.6.0+0 | 6.6.0+0 |
ncursesopenEuler:24.03-LTS-SP2 |
before 6.4-10.oe2403sp2 | 6.4-10.oe2403sp2 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ncursesopenEuler:20.03-LTS-SP4 |
before 6.2-7.oe2003sp4 | 6.2-7.oe2003sp4 |
ncursesopenEuler:22.03-LTS-SP3 |
before 6.3-16.oe2203sp3 | 6.3-16.oe2203sp3 |
ncursesopenEuler:22.03-LTS-SP4 |
before 6.3-16.oe2203sp4 | 6.3-16.oe2203sp4 |
ncursesopenEuler:24.03-LTS |
before 6.4-10.oe2403sp1 | 6.4-10.oe2403sp1 |
ncursesopenEuler:24.03-LTS-SP1 |
before 6.4-10.oe2403sp1 | 6.4-10.oe2403sp1 |
ncursesRoot:Debian:11 |
before 6.2+20201114-2+deb11u2.root.io.6 | 6.2+20201114-2+deb11u2.root.io.66.2+20201114-2+deb11u2.aikido.7 |
rootio-ncursesRoot:Debian:11 |
before 6.2+20201114-2+deb11u2.root.io.6 | 6.2+20201114-2+deb11u2.root.io.66.2+20201114-2+deb11u2.aikido.7 |
ncursesRoot:Debian:12 |
before 6.4-4.root.io.6 | 6.4-4.root.io.66.4-4.aikido.7 |
rootio-ncursesRoot:Debian:12 |
before 6.4-4.root.io.6 | 6.4-4.root.io.66.4-4.aikido.7 |
ncursesRoot:Debian:13 |
before 6.5+20250216-2.aikido.3 | 6.5+20250216-2.aikido.36.5+20250216-2.root.io.2 |
rootio-ncursesRoot:Debian:13 |
before 6.5+20250216-2.aikido.3 | 6.5+20250216-2.aikido.36.5+20250216-2.root.io.2 |
ncursesUbuntu:Pro:14.04:LTS |
before 5.9+20140118-1ubuntu1+esm7, plus listed versions 5.9+20130608-1ubuntu15.9+20131221-1ubuntu15.9+20140118-1ubuntu15.9+20140118-1ubuntu1+esm15.9+20140118-1ubuntu1+esm2 Show 4 moreShow less5.9+20140118-1ubuntu1+esm35.9+20140118-1ubuntu1+esm45.9+20140118-1ubuntu1+esm55.9+20140118-1ubuntu1+esm6 |
5.9+20140118-1ubuntu1+esm7 |
ncursesUbuntu:Pro:16.04:LTS |
before 6.0+20160213-1ubuntu1+esm7, plus listed versions 5.9+20150516-2ubuntu16.0+20151024-2ubuntu16.0+20151024-2ubuntu26.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm1 Show 5 moreShow less6.0+20160213-1ubuntu1+esm26.0+20160213-1ubuntu1+esm36.0+20160213-1ubuntu1+esm46.0+20160213-1ubuntu1+esm56.0+20160213-1ubuntu1+esm6 |
6.0+20160213-1ubuntu1+esm7 |
ncursesUbuntu:Pro:18.04:LTS |
before 6.1-1ubuntu1.18.04.1+esm4, plus listed versions 6.0+20160625-1ubuntu16.0+20171125-1ubuntu16.1-1ubuntu16.1-1ubuntu1.18.046.1-1ubuntu1.18.04.16.1-1ubuntu1.18.04.1+esm16.1-1ubuntu1.18.04.1+esm26.1-1ubuntu1.18.04.1+esm3 |
6.1-1ubuntu1.18.04.1+esm4 |
ncursesUbuntu:Pro:20.04:LTS |
before 6.2-0ubuntu2.1+esm2, plus listed versions 6.1+20190803-1ubuntu16.1+20191019-1ubuntu16.2-0ubuntu26.2-0ubuntu2.16.2-0ubuntu2.1+esm1 |
6.2-0ubuntu2.1+esm2 |
ncursesUbuntu:22.04:LTS |
before 6.3-2ubuntu0.3, plus listed versions 6.2+20201114-2build16.2+20201114-2build26.3-16.3-26.3-2ubuntu0.16.3-2ubuntu0.2 |
6.3-2ubuntu0.3 |
ncursesUbuntu:24.04:LTS |
before 6.4+20240113-1ubuntu2.2, plus listed versions 6.4+20230625-26.4+20231016-16.4+20231121-1build16.4+20231209-16.4+20240113-1ubuntu16.4+20240113-1ubuntu26.4+20240113-1ubuntu2.1 |
6.4+20240113-1ubuntu2.2 |
ncursesUbuntu:25.10 |
All versions, plus listed versions 6.5+20250216-26.5+20250216-2build16.5+20250216-2ubuntu0.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-6141 is a medium vulnerability (CVSS 4.8) in Gnu Ncurses, published June 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in ncurses 6.4-3.
References
vuldb.com?id.312610
lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html
Show 12 moreShow less
invisible-island.net/ncurses/NEWS.html
gnu.org
cert-portal.siemens.com/productcert/html/ssa-089022.html
nvd.nist.gov/vuln/detail/CVE-2025-6141
github.com/advisories/GHSA-wfwf-ggr2-rpjf
docs.bell-sw.com/security/cves/CVE-2025-6141
security-tracker.debian.org/tracker/CVE-2025-6141
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1851
ubuntu.com/security/CVE-2025-6141
cve.org/CVERecord?id=CVE-2025-6141