{"id":"CVE-2025-69720","aliases":["ALSA-2026:5913","AZL-80469","BELL-CVE-2025-69720","CLSA-2026-1776163577","CLSA-2026-1777445825","CLSA-2026-1777480556","CLSA-2026-1787663865","DEBIAN-CVE-2025-69720","EUVD-2025-208879","GHSA-9952-mrqj-h4jh","JLSEC-2026-1242","OESA-2026-1807","OESA-2026-1808","OESA-2026-1809","OESA-2026-1904","OESA-2026-1905","OESA-2026-1906","RHSA-2026:26357","RHSA-2026:5913","RHSA-2026:7263","RLSA-2026:5913","ROOT-OS-DEBIAN-11-CVE-2025-69720","ROOT-OS-DEBIAN-12-CVE-2025-69720","ROOT-OS-DEBIAN-13-CVE-2025-69720","SUSE-SU-2026:1499-1","SUSE-SU-2026:1510-1","SUSE-SU-2026:21247-1","SUSE-SU-2026:21261-1","SUSE-SU-2026:22228-1","SUSE-SU-2026:22294-1","UBUNTU-CVE-2025-69720","USN-8503-1","openSUSE-SU-2026:20992-1"],"status":"published","title":"ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00475,"percentile":0.41314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120","CWE-121"],"published":"2026-03-19T00:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"Cao-Wuhui/CVE-2025-69720","title":"Cao-Wuhui/CVE-2025-69720","date":"2025-12-11","url":"https://github.com/Cao-Wuhui/CVE-2025-69720"}],"fixes":[{"ecosystem":"AlmaLinux:10","package":"ncurses-base","fixed_in":["6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"ncurses-term","fixed_in":["6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ncurses","fixed_in":["6.3_p20221119-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"ncurses","fixed_in":["6.5_p20250503-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ncurses","fixed_in":["6.6_p20251231-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"ncurses","fixed_in":["6.3_p20221119-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"ncurses","fixed_in":["6.5_p20250503-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"ncurses","fixed_in":["6.6_p20251231-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-base","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-devel","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-libs","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-static","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-term","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-base","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-devel","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-libs","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-static","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-term","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"lib32ncurses-dev","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"lib32ncurses6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"lib32ncursesw6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"lib32tinfo6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncurses-dev","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncurses5","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncurses5-dev","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncurses6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncursesw5","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncursesw5-dev","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libncursesw6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtinfo-dev","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtinfo5","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtinfo6","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ncurses-base","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ncurses-bin","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ncurses-doc","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ncurses-examples","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ncurses-term","fixed_in":["6.1+20181013-2+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncurses5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncurses5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncursesw5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncursesw5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32tinfo-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32tinfo5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libncurses5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libncurses5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libncursesw5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libncursesw5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtinfo-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtinfo5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncurses5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncurses5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncursesw5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncursesw5-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32tinfo-dev","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32tinfo5","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-base","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-bin","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-doc","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-examples","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-term","fixed_in":["6.1-1ubuntu1.18.04.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ncurses","fixed_in":["6.6+20251231-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Ncurses_jll","fixed_in":["6.6.0+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","fixed_in":["6.2-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ncurses","fixed_in":["6.3-17.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ncurses","fixed_in":["6.4-11.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"ncurses","fixed_in":["6.4-12.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"ncurses","fixed_in":["6.4-12.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"ncurses","fixed_in":["6.4-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-c++-libs","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-debuginfo","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-debugsource","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-devel","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-libs-debuginfo","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-term","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-base","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-libs","fixed_in":["0:6.4-14.20240127.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-c++-libs","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-debuginfo","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-debugsource","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-devel","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-libs-debuginfo","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-term","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-base","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-libs","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-base","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-c++-libs","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-compat-libs","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-devel","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-libs","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-static","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"ncurses-term","fixed_in":["0:6.6-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"ncurses","fixed_in":["0:6.4-15.20240127.el10_1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7","6.2+20201114-2+deb11u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7","6.2+20201114-2+deb11u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"ncurses","fixed_in":["6.4-4.root.io.5","6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-ncurses","fixed_in":["6.4-4.root.io.5","6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"ncurses","fixed_in":["6.5+20250216-2.aikido.3","6.5+20250216-2.root.io.2","6.5+20250216-2.root.io.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-ncurses","fixed_in":["6.5+20250216-2.aikido.3","6.5+20250216-2.root.io.2","6.5+20250216-2.root.io.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ncurses","fixed_in":["5.9-91.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","fixed_in":["6.1-150000.5.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"ncurses","fixed_in":["6.4.20240224-11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"ncurses","fixed_in":["6.4.20240224-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"ncurses","fixed_in":["6.5.20250531-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ncurses","fixed_in":["6.5.20250531-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ncurses","fixed_in":["6.5.20250531-160000.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","fixed_in":["5.9+20140118-1ubuntu1+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","fixed_in":["6.0+20160213-1ubuntu1+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","fixed_in":["6.1-1ubuntu1.18.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","fixed_in":["6.2-0ubuntu2.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","fixed_in":["6.3-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ncurses","fixed_in":["6.4+20240113-1ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"ncurses","fixed_in":["6.5+20250216-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"ncurses","fixed_in":["6.5.20250531-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3_p20221119-r0"},{"fixed":"6.3_p20221119-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5_p20250503-r0"},{"fixed":"6.5_p20250503-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4_p20230603-r0"},{"fixed":"6.6_p20251231-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3_p20221119-r0"},{"fixed":"6.3_p20221119-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5_p20250503-r0"},{"fixed":"6.5_p20250503-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4_p20230603-r0"},{"fixed":"6.6_p20251231-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"lib32ncurses-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"lib32ncurses6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"lib32ncursesw6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"lib32tinfo6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncurses-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncurses5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncurses5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncurses6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncursesw5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncursesw5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libncursesw6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtinfo-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtinfo5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtinfo6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ncurses-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ncurses-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ncurses-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncurses5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncurses5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncursesw5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32ncursesw5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32tinfo-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"lib32tinfo5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libncurses5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libncurses5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libncursesw5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libncursesw5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtinfo-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtinfo5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncurses5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncurses5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncursesw5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32ncursesw5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32tinfo-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libx32tinfo5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4+20230603-1","6.4+20230625-1","6.4+20230625-2","6.4+20231007-1","6.4+20231016-1","6.4+20231118-1","6.4+20231121-1","6.4+20231209-1","6.4+20240113-1","6.4+20240414-1","6.4-4","6.5+20250125-1","6.5+20250125-2","6.5+20250216-1","6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1","6.5-1","6.5-2","6.6+20251231-1","6.6+20260608-1","6.6+20260608-2"]},{"source":"osv","ecosystem":"Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1","6.6+20251231-1","6.6+20260608-1","6.6+20260608-2"]},{"source":"osv","ecosystem":"Debian:14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6+20251231-1"}]}],"versions":["6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1"]},{"source":"osv","ecosystem":"Julia","package":"Ncurses_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.6.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-17.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-11.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-12.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-12.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-14.20240127.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-compat-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4-15.20240127.el10_1"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"},{"fixed":"6.2+20201114-2+deb11u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"},{"fixed":"6.2+20201114-2+deb11u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.5"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.5"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20250216-2.aikido.3"},{"fixed":"6.5+20250216-2.root.io.2"},{"fixed":"6.5+20250216-2.root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20250216-2.aikido.3"},{"fixed":"6.5+20250216-2.root.io.2"},{"fixed":"6.5+20250216-2.root.io.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-91.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.20240224-11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.20240224-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.20250531-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.20250531-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.20250531-160000.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm6"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4","5.9+20140118-1ubuntu1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm6"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4","6.0+20160213-1ubuntu1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm3"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1","6.1-1ubuntu1.18.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1+esm1"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2","6.2-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.2"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2","6.3-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4+20240113-1ubuntu2.1"}]}],"versions":["6.4+20230625-2","6.4+20231016-1","6.4+20231121-1build1","6.4+20231209-1","6.4+20240113-1ubuntu1","6.4+20240113-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5+20250216-2ubuntu0.1"}]}],"versions":["6.5+20250216-2","6.5+20250216-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm6"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4","5.9+20140118-1ubuntu1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm6"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4","6.0+20160213-1ubuntu1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm3"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1","6.1-1ubuntu1.18.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1+esm1"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2","6.2-0ubuntu2.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.20250531-160000.3.1"}]}]}],"products":[{"vendor":"gnu","product":"ncurses"},{"vendor":"invisible-island","product":"ncurses"},{"vendor":"siemens","product":"ruggedcom rst2428p"}],"references":[{"url":"https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2","tags":["Issue Tracking","Mailing List","Vendor Advisory","web","article","report"]},{"url":"https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2","tags":["Issue Tracking","Mailing List","Vendor Advisory","web","article","report"]},{"url":"https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2","tags":["Issue Tracking","Mailing List","Vendor Advisory","web","article","report"]},{"url":"https://github.com/Cao-Wuhui/CVE-2025-69720","tags":["Exploit","Third Party Advisory","web","article","report"]},{"url":"https://invisible-island.net/archives/ncurses/6.5/","tags":["Release Notes","web"]},{"url":"https://invisible-island.net/ncurses/","tags":["Product","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69720","tags":["web","advisory"]},{"url":"https://invisible-island.net/archives/ncurses/6.5","tags":["web"]},{"url":"https://invisible-island.net/ncurses","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9952-mrqj-h4jh","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69720","tags":["report"]},{"url":"https://bugzilla.redhat.com/2449037","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-5913.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-69720","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776163577.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777445825.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1777480556.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787663865.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-69720","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1807","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1808","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1809","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1904","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1905","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1906","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26357","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449037","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26357.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69720","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5913.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7263","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7263.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:5913","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261499-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259924","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69720","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261510-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621247-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621261-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622228-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622294-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-69720","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8503-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-69720","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T00:00:00Z","modified":"2026-06-02T13:00:33.095Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-121","CWE-120"],"updated_at":"2026-11-02T14:32:41.089134Z"}],"euvd":[{"id":"EUVD-2025-208879","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T00:00:00Z","modified":"2026-06-02T13:00:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:56.59039Z"}],"ghsa":[{"id":"GHSA-9952-mrqj-h4jh","title":"ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...","description":"ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().","status":"published","published":"2026-03-19T15:31:21Z","modified":"2026-06-02T15:33:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120","CWE-121"],"updated_at":"2026-11-02T15:08:30.158602Z"}],"nvd":[{"id":"CVE-2025-69720","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T15:16:21.293Z","modified":"2026-06-17T10:00:50.423Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-121","CWE-120"],"updated_at":"2026-11-02T14:12:01.641503Z"}],"osv":[{"id":"BELL-CVE-2025-69720","status":"published","published":"2026-03-21T06:35:28.646338Z","modified":"2026-03-28T07:16:34.751218Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"DEBIAN-CVE-2025-69720","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T15:16:21.293Z","modified":"2026-09-01T20:05:57.963309953Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:48.025964Z"},{"id":"JLSEC-2026-1242","title":"ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in `analyze_string` in `progs/infocmp.c`.","status":"published","published":"2026-08-10T20:25:33.558Z","modified":"2026-08-10T20:43:50.299563729Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2026-1807","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-03T11:10:49Z","modified":"2026-08-18T01:19:45.819719312Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1808","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-03T11:10:49Z","modified":"2026-08-18T01:19:45.820338434Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1809","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-03T11:10:49Z","modified":"2026-08-18T01:19:45.909183309Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1904","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.332938691Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1905","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.306577071Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1906","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\n\nThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.331227753Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:26357","title":"Red Hat Security Advisory: ncurses security update","status":"published","published":"2026-06-17T10:08:47Z","modified":"2026-10-17T10:11:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:5913","title":"Red Hat Security Advisory: ncurses security update","status":"published","published":"2026-03-26T10:15:51Z","modified":"2026-10-17T10:16:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:7263","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:48Z","modified":"2026-10-17T10:19:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:5913","title":"Moderate: ncurses security update","description":"The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.\n\nSecurity Fix(es):\n\n* ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-09T12:07:05.48411Z","modified":"2026-04-09T12:30:52.793247Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-69720","title":"CVE-2025-69720 in ncurses - Patched by Root","description":"Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T08:23:52Z","modified":"2026-08-23T10:18:06.206333423Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-69720","title":"CVE-2025-69720 in ncurses - Patched by Root","description":"Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:20:35Z","modified":"2026-08-26T01:10:36.90718535Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-69720","title":"CVE-2025-69720 in ncurses - Patched by Root","description":"Root has patched CVE-2025-69720 in the ncurses package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-24T16:17:26Z","modified":"2026-08-24T18:45:11.880873835Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"UBUNTU-CVE-2025-69720","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T15:16:00Z","modified":"2026-07-08T18:30:10.365748761Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"ALSA-2026:5913","title":"Moderate: ncurses security update","description":"The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.  \n\nSecurity Fix(es):  \n\n  * ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-26T00:00:00Z","modified":"2026-10-29T11:30:46.781783177Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-80469","title":"CVE-2025-69720 affecting package ncurses for versions less than 6.4-3","description":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","status":"published","published":"2026-03-19T15:16:21Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"CLSA-2026-1776163577","title":"ncurses: Fix of CVE-2025-69720","description":"- CVE-2025-69720: add a limit-check in infocmp -i option's\n  analyze_string function to prevent stack-based buffer overflow\n  (from upstream ncurses 6.5 patchlevel 20251213)","status":"published","published":"2026-05-08T09:52:10Z","modified":"2026-06-01T00:33:18.320338433Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1777445825","title":"ncurses: Fix of CVE-2025-69720","description":"- CVE-2025-69720: add a limit-check in infocmp -i option's\n  analyze_string function to prevent stack-based buffer overflow\n  (from upstream ncurses 6.5 patchlevel 20251213)","status":"published","published":"2026-04-29T06:57:18Z","modified":"2026-06-01T00:33:27.205351419Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777480556","title":"Fix CVE(s): CVE-2025-69720","description":"   * SECURITY UPDATE: stack-based buffer overflow in infocmp\n     - debian/patches/CVE-2025-69720.patch: add a bounds check on strlen(cp)\n       in analyze_string() in progs/infocmp.c and grow buf2 by one byte so\n       a maliciously long SGR parameter list can no longer overflow the\n       stack buffer.\n     - CVE-2025-69720","status":"published","published":"2026-04-29T16:36:01Z","modified":"2026-06-04T10:03:36.941654Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1787663865","title":"Fix CVE(s): CVE-2025-69720","description":"   * SECURITY UPDATE: stack buffer overflow in the infocmp -i option\n     - debian/patches/CVE-2025-69720.patch: in analyze_string() in\n       progs/infocmp.c, clamp the copy length taken from strlen(cp) to\n       MAX_TERMINFO_LENGTH and grow buf2 by one byte for the terminating\n       NUL, so an over-long capability string can no longer overflow the\n       fixed-size stack buffer.\n     - CVE-2025-69720","status":"published","published":"2026-08-25T13:17:56Z","modified":"2026-10-26T09:32:03.615989026Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"openSUSE-SU-2026:20992-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-06-20T18:11:34Z","modified":"2026-06-30T18:24:27.646172624Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1499-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-04-20T16:16:27Z","modified":"2026-04-22T08:16:09.057569Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1510-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-04-21T06:28:16Z","modified":"2026-04-22T08:16:22.0276Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21247-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-04-21T08:57:05Z","modified":"2026-04-24T18:24:54.880283Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21261-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-04-21T08:27:11Z","modified":"2026-04-24T18:25:16.98234Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:22228-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-06-20T18:13:44Z","modified":"2026-06-24T09:00:09.50623556Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22294-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\n- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).\n","status":"published","published":"2026-06-20T18:13:44Z","modified":"2026-07-02T18:24:09.416844788Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"USN-8503-1","title":"ncurses vulnerability","description":"It was discovered that ncurses incorrectly handled certain terminfo\nentries in the infocmp tool. An attacker could possibly use this issue\nto cause a denial of service via a crafted terminfo file.\n\nThe default compiler options for affected releases should reduce the\nvulnerability to a denial of service.","status":"published","published":"2026-07-02T22:04:04Z","modified":"2026-07-08T18:44:25.71291149Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}