{"id":"CVE-2025-6141","aliases":["AZL-64139","BELL-CVE-2025-6141","DEBIAN-CVE-2025-6141","EUVD-2025-18429","GHSA-wfwf-ggr2-rpjf","JLSEC-2026-454","OESA-2025-1851","ROOT-OS-DEBIAN-11-CVE-2025-6141","ROOT-OS-DEBIAN-12-CVE-2025-6141","ROOT-OS-DEBIAN-13-CVE-2025-6141","UBUNTU-CVE-2025-6141","USN-8709-1"],"status":"published","title":"GNU ncurses parse_entry.c postprocess_termcap stack-based overflow","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00201,"percentile":0.10078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-121"],"published":"2025-06-16T22:00:17Z","modified":"2026-09-02T02:41:28Z","fixes":[{"ecosystem":"Azure Linux:3","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ncurses","fixed_in":["6.3_p20221119-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ncurses","fixed_in":["6.5_p20250405-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"ncurses","fixed_in":["6.3_p20221119-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"ncurses","fixed_in":["6.5_p20250405-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ncurses","fixed_in":["6.5+20251115-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Ncurses_jll","fixed_in":["6.6.0+0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"ncurses","fixed_in":["6.4-10.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","fixed_in":["6.2-7.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"ncurses","fixed_in":["6.3-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ncurses","fixed_in":["6.3-16.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ncurses","fixed_in":["6.4-10.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"ncurses","fixed_in":["6.4-10.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"ncurses","fixed_in":["6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-ncurses","fixed_in":["6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"ncurses","fixed_in":["6.5+20250216-2.aikido.3","6.5+20250216-2.root.io.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-ncurses","fixed_in":["6.5+20250216-2.aikido.3","6.5+20250216-2.root.io.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","fixed_in":["5.9+20140118-1ubuntu1+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","fixed_in":["6.0+20160213-1ubuntu1+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","fixed_in":["6.1-1ubuntu1.18.04.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","fixed_in":["6.2-0ubuntu2.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","fixed_in":["6.3-2ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ncurses","fixed_in":["6.4+20240113-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3_p20221119-r0"},{"fixed":"6.3_p20221119-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4_p20230603-r0"},{"fixed":"6.5_p20250405-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3_p20221119-r0"},{"fixed":"6.3_p20221119-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4_p20230603-r0"},{"fixed":"6.5_p20250405-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4+20230603-1","6.4+20230625-1","6.4+20230625-2","6.4+20231007-1","6.4+20231016-1","6.4+20231118-1","6.4+20231121-1","6.4+20231209-1","6.4+20240113-1","6.4+20240414-1","6.4-4","6.5+20250125-1","6.5+20250125-2","6.5+20250216-1","6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1","6.5-1","6.5-2","6.6+20251231-1","6.6+20260608-1","6.6+20260608-2"]},{"source":"osv","ecosystem":"Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1","6.6+20251231-1","6.6+20260608-1","6.6+20260608-2"]},{"source":"osv","ecosystem":"Debian:14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20251115-2"}]}],"versions":["6.5+20250216-2","6.5+20251115-1"]},{"source":"osv","ecosystem":"Julia","package":"Ncurses_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.6.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-10.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-7.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-16.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-10.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-10.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20250216-2.aikido.3"},{"fixed":"6.5+20250216-2.root.io.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20250216-2.aikido.3"},{"fixed":"6.5+20250216-2.root.io.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm7"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4","5.9+20140118-1ubuntu1+esm5","5.9+20140118-1ubuntu1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm7"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4","6.0+20160213-1ubuntu1+esm5","6.0+20160213-1ubuntu1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm4"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1","6.1-1ubuntu1.18.04.1+esm2","6.1-1ubuntu1.18.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1+esm2"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2","6.2-0ubuntu2.1","6.2-0ubuntu2.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.3"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2","6.3-2ubuntu0.1","6.3-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4+20240113-1ubuntu2.2"}]}],"versions":["6.4+20230625-2","6.4+20231016-1","6.4+20231121-1build1","6.4+20231209-1","6.4+20240113-1ubuntu1","6.4+20240113-1ubuntu2","6.4+20240113-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5+20250216-2","6.5+20250216-2build1","6.5+20250216-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm7"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4","5.9+20140118-1ubuntu1+esm5","5.9+20140118-1ubuntu1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm7"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4","6.0+20160213-1ubuntu1+esm5","6.0+20160213-1ubuntu1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm4"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1","6.1-1ubuntu1.18.04.1+esm2","6.1-1ubuntu1.18.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1+esm2"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2","6.2-0ubuntu2.1","6.2-0ubuntu2.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.3"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2","6.3-2ubuntu0.1","6.3-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4+20240113-1ubuntu2.2"}]}],"versions":["6.4+20230625-2","6.4+20231016-1","6.4+20231121-1build1","6.4+20231209-1","6.4+20240113-1ubuntu1","6.4+20240113-1ubuntu2","6.4+20240113-1ubuntu2.1"]}],"products":[{"vendor":"gnu","product":"ncurses"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family"},{"vendor":"siemens","product":"scalance xch328"},{"vendor":"siemens","product":"scalance xcm324"},{"vendor":"siemens","product":"scalance xcm328"},{"vendor":"siemens","product":"scalance xcm332"},{"vendor":"siemens","product":"scalance xrh334 (24 v dc, 8xfo, cc)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24v dc, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230v ac, 2x10g, 24xsfp, 8xsfp+)"}],"references":[{"url":"https://vuldb.com/?id.312610","tags":["vdb-entry","technical-description","web","report"]},{"url":"https://vuldb.com/?ctiid.312610","tags":["signature","permissions-required","web","report"]},{"url":"https://vuldb.com/?submit.593000","tags":["third-party-advisory","web","report"]},{"url":"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html","tags":["related","web","report"]},{"url":"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html","tags":["related","web","report"]},{"url":"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html","tags":["patch","web","report"]},{"url":"https://invisible-island.net/ncurses/NEWS.html#index-t20250329","tags":["related","web","report"]},{"url":"https://www.gnu.org/","tags":["product","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6141","tags":["web","advisory"]},{"url":"https://www.gnu.org","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wfwf-ggr2-rpjf","tags":["web"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-6141","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6141","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1851","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6141","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8709-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6141","title":"GNU ncurses parse_entry.c postprocess_termcap stack-based overflow","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:00:17.088Z","modified":"2026-06-02T12:59:41.864Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:32:40.072186Z"}],"euvd":[{"id":"EUVD-2025-18429","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:00:17Z","modified":"2026-06-02T12:59:41Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium"}],"updated_at":"2026-11-02T18:20:56.59039Z"}],"ghsa":[{"id":"GHSA-wfwf-ggr2-rpjf","title":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic....","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-17T00:30:30Z","modified":"2026-06-02T15:31:49Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:08:29.586291Z"}],"nvd":[{"id":"CVE-2025-6141","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:16:41.527Z","modified":"2026-06-17T10:01:15.04Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-119","CWE-121"],"updated_at":"2026-11-02T14:11:13.247441Z"}],"osv":[{"id":"BELL-CVE-2025-6141","status":"published","published":"2025-06-17T05:59:58.879309Z","modified":"2026-01-26T09:40:35.549554Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-6141","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:16:41Z","modified":"2026-04-10T05:32:36.325086Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-6141","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:16:41.527Z","modified":"2026-09-01T20:05:55.518314424Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"JLSEC-2026-454","title":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function `postprocess_termcap` of the file `tinfo/parse_entry.c`. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2026-05-05T15:51:30.603Z","modified":"2026-07-25T18:24:29.394317828Z","cvss":[{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2025-1851","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.(CVE-2025-6141)","status":"published","published":"2025-07-18T11:08:56Z","modified":"2026-08-18T01:18:54.166416645Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2025-6141","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:16:00Z","modified":"2026-09-01T21:00:11.451261813Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-64139","title":"CVE-2025-6141 affecting package ncurses for versions less than 6.4-3","description":"A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.","status":"published","published":"2025-06-16T22:16:41Z","modified":"2026-08-28T17:47:14.690027058Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-6141","title":"CVE-2025-6141 in ncurses - Patched by Root","description":"Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T08:23:52Z","modified":"2026-08-23T10:15:27.417903491Z","updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-6141","title":"CVE-2025-6141 in ncurses - Patched by Root","description":"Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:20:35Z","modified":"2026-08-26T01:12:42.28160575Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-6141","title":"CVE-2025-6141 in ncurses - Patched by Root","description":"Root has patched CVE-2025-6141 in the ncurses package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-24T16:17:26Z","modified":"2026-08-24T18:45:13.285979479Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"USN-8709-1","title":"ncurses vulnerability","description":"It was discovered that ncurses incorrectly handled specially crafted\nterminfo database entries. A local attacker could possibly use this issue\nto cause applications using ncurses to crash, resulting in a denial of\nservice.","status":"published","published":"2026-09-01T15:24:11Z","modified":"2026-09-02T02:41:28.840007516Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}