Stack-based buffer overflow in GNU ncurses
Priority HIGH 82CWE-121Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-121 and the CVSS impact.
Summary
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00475 41st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed ncurses (GNU): 6.5-20251213Red Hat: 3 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| GNU | ncurses | before 6.5-20251213 | 6.5-20251213 | Patch available | CNA |
- ncurses VendorGNU Affected before 6.5-20251213 Fixed in 6.5-20251213 Patch available CNA
CPE configurations NVD · 82
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:invisible-island:ncurses:*:*:*:*:*:*:*:* | up to 6.4 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240427:*:*:*:*:*:* | 6.5 20240427 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240504:*:*:*:*:*:* | 6.5 20240504 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240511:*:*:*:*:*:* | 6.5 20240511 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240518:*:*:*:*:*:* | 6.5 20240518 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240519:*:*:*:*:*:* | 6.5 20240519 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240525:*:*:*:*:*:* | 6.5 20240525 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240601:*:*:*:*:*:* | 6.5 20240601 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240608:*:*:*:*:*:* | 6.5 20240608 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240615:*:*:*:*:*:* | 6.5 20240615 | Vulnerable | Invisible-island |
- cpe:2.3:a:invisible-island:ncurses:*:*:*:*:*:*:*:* Versions up to 6.4 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240427:*:*:*:*:*:* Versions 6.5 20240427 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240504:*:*:*:*:*:* Versions 6.5 20240504 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240511:*:*:*:*:*:* Versions 6.5 20240511 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240518:*:*:*:*:*:* Versions 6.5 20240518 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240519:*:*:*:*:*:* Versions 6.5 20240519 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240525:*:*:*:*:*:* Versions 6.5 20240525 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240601:*:*:*:*:*:* Versions 6.5 20240601 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240608:*:*:*:*:*:* Versions 6.5 20240608 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240615:*:*:*:*:*:* Versions 6.5 20240615 Vulnerable ·Invisible-island
Show 72 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:invisible-island:ncurses:6.5:20240622:*:*:*:*:*:* | 6.5 20240622 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240629:*:*:*:*:*:* | 6.5 20240629 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240706:*:*:*:*:*:* | 6.5 20240706 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240713:*:*:*:*:*:* | 6.5 20240713 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240720:*:*:*:*:*:* | 6.5 20240720 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240727:*:*:*:*:*:* | 6.5 20240727 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240810:*:*:*:*:*:* | 6.5 20240810 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240817:*:*:*:*:*:* | 6.5 20240817 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240824:*:*:*:*:*:* | 6.5 20240824 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240831:*:*:*:*:*:* | 6.5 20240831 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240914:*:*:*:*:*:* | 6.5 20240914 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240922:*:*:*:*:*:* | 6.5 20240922 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20240928:*:*:*:*:*:* | 6.5 20240928 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241006:*:*:*:*:*:* | 6.5 20241006 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241019:*:*:*:*:*:* | 6.5 20241019 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241026:*:*:*:*:*:* | 6.5 20241026 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241102:*:*:*:*:*:* | 6.5 20241102 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241109:*:*:*:*:*:* | 6.5 20241109 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241123:*:*:*:*:*:* | 6.5 20241123 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241130:*:*:*:*:*:* | 6.5 20241130 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241207:*:*:*:*:*:* | 6.5 20241207 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241214:*:*:*:*:*:* | 6.5 20241214 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241221:*:*:*:*:*:* | 6.5 20241221 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20241228:*:*:*:*:*:* | 6.5 20241228 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250104:*:*:*:*:*:* | 6.5 20250104 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250111:*:*:*:*:*:* | 6.5 20250111 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250118:*:*:*:*:*:* | 6.5 20250118 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250125:*:*:*:*:*:* | 6.5 20250125 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250201:*:*:*:*:*:* | 6.5 20250201 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250208:*:*:*:*:*:* | 6.5 20250208 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250215:*:*:*:*:*:* | 6.5 20250215 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250216:*:*:*:*:*:* | 6.5 20250216 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250222:*:*:*:*:*:* | 6.5 20250222 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250301:*:*:*:*:*:* | 6.5 20250301 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250308:*:*:*:*:*:* | 6.5 20250308 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250315:*:*:*:*:*:* | 6.5 20250315 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250322:*:*:*:*:*:* | 6.5 20250322 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250329:*:*:*:*:*:* | 6.5 20250329 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250405:*:*:*:*:*:* | 6.5 20250405 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250412:*:*:*:*:*:* | 6.5 20250412 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250419:*:*:*:*:*:* | 6.5 20250419 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250426:*:*:*:*:*:* | 6.5 20250426 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250503:*:*:*:*:*:* | 6.5 20250503 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250510:*:*:*:*:*:* | 6.5 20250510 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250517:*:*:*:*:*:* | 6.5 20250517 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250524:*:*:*:*:*:* | 6.5 20250524 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250531:*:*:*:*:*:* | 6.5 20250531 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250614:*:*:*:*:*:* | 6.5 20250614 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250621:*:*:*:*:*:* | 6.5 20250621 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250628:*:*:*:*:*:* | 6.5 20250628 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250705:*:*:*:*:*:* | 6.5 20250705 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250712:*:*:*:*:*:* | 6.5 20250712 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250720:*:*:*:*:*:* | 6.5 20250720 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250726:*:*:*:*:*:* | 6.5 20250726 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250802:*:*:*:*:*:* | 6.5 20250802 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250809:*:*:*:*:*:* | 6.5 20250809 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250816:*:*:*:*:*:* | 6.5 20250816 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250823:*:*:*:*:*:* | 6.5 20250823 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250830:*:*:*:*:*:* | 6.5 20250830 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250913:*:*:*:*:*:* | 6.5 20250913 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250920:*:*:*:*:*:* | 6.5 20250920 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20250927:*:*:*:*:*:* | 6.5 20250927 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251004:*:*:*:*:*:* | 6.5 20251004 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251010:*:*:*:*:*:* | 6.5 20251010 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251018:*:*:*:*:*:* | 6.5 20251018 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251025:*:*:*:*:*:* | 6.5 20251025 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251101:*:*:*:*:*:* | 6.5 20251101 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251115:*:*:*:*:*:* | 6.5 20251115 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251122:*:*:*:*:*:* | 6.5 20251122 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251123:*:*:*:*:*:* | 6.5 20251123 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251129:*:*:*:*:*:* | 6.5 20251129 | Vulnerable | Invisible-island |
| cpe:2.3:a:invisible-island:ncurses:6.5:20251206:*:*:*:*:*:* | 6.5 20251206 | Vulnerable | Invisible-island |
- cpe:2.3:a:invisible-island:ncurses:6.5:20240622:*:*:*:*:*:* Versions 6.5 20240622 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240629:*:*:*:*:*:* Versions 6.5 20240629 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240706:*:*:*:*:*:* Versions 6.5 20240706 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240713:*:*:*:*:*:* Versions 6.5 20240713 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240720:*:*:*:*:*:* Versions 6.5 20240720 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240727:*:*:*:*:*:* Versions 6.5 20240727 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240810:*:*:*:*:*:* Versions 6.5 20240810 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240817:*:*:*:*:*:* Versions 6.5 20240817 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240824:*:*:*:*:*:* Versions 6.5 20240824 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240831:*:*:*:*:*:* Versions 6.5 20240831 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240914:*:*:*:*:*:* Versions 6.5 20240914 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240922:*:*:*:*:*:* Versions 6.5 20240922 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20240928:*:*:*:*:*:* Versions 6.5 20240928 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241006:*:*:*:*:*:* Versions 6.5 20241006 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241019:*:*:*:*:*:* Versions 6.5 20241019 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241026:*:*:*:*:*:* Versions 6.5 20241026 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241102:*:*:*:*:*:* Versions 6.5 20241102 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241109:*:*:*:*:*:* Versions 6.5 20241109 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241123:*:*:*:*:*:* Versions 6.5 20241123 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241130:*:*:*:*:*:* Versions 6.5 20241130 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241207:*:*:*:*:*:* Versions 6.5 20241207 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241214:*:*:*:*:*:* Versions 6.5 20241214 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241221:*:*:*:*:*:* Versions 6.5 20241221 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20241228:*:*:*:*:*:* Versions 6.5 20241228 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250104:*:*:*:*:*:* Versions 6.5 20250104 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250111:*:*:*:*:*:* Versions 6.5 20250111 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250118:*:*:*:*:*:* Versions 6.5 20250118 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250125:*:*:*:*:*:* Versions 6.5 20250125 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250201:*:*:*:*:*:* Versions 6.5 20250201 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250208:*:*:*:*:*:* Versions 6.5 20250208 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250215:*:*:*:*:*:* Versions 6.5 20250215 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250216:*:*:*:*:*:* Versions 6.5 20250216 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250222:*:*:*:*:*:* Versions 6.5 20250222 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250301:*:*:*:*:*:* Versions 6.5 20250301 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250308:*:*:*:*:*:* Versions 6.5 20250308 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250315:*:*:*:*:*:* Versions 6.5 20250315 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250322:*:*:*:*:*:* Versions 6.5 20250322 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250329:*:*:*:*:*:* Versions 6.5 20250329 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250405:*:*:*:*:*:* Versions 6.5 20250405 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250412:*:*:*:*:*:* Versions 6.5 20250412 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250419:*:*:*:*:*:* Versions 6.5 20250419 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250426:*:*:*:*:*:* Versions 6.5 20250426 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250503:*:*:*:*:*:* Versions 6.5 20250503 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250510:*:*:*:*:*:* Versions 6.5 20250510 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250517:*:*:*:*:*:* Versions 6.5 20250517 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250524:*:*:*:*:*:* Versions 6.5 20250524 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250531:*:*:*:*:*:* Versions 6.5 20250531 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250614:*:*:*:*:*:* Versions 6.5 20250614 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250621:*:*:*:*:*:* Versions 6.5 20250621 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250628:*:*:*:*:*:* Versions 6.5 20250628 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250705:*:*:*:*:*:* Versions 6.5 20250705 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250712:*:*:*:*:*:* Versions 6.5 20250712 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250720:*:*:*:*:*:* Versions 6.5 20250720 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250726:*:*:*:*:*:* Versions 6.5 20250726 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250802:*:*:*:*:*:* Versions 6.5 20250802 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250809:*:*:*:*:*:* Versions 6.5 20250809 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250816:*:*:*:*:*:* Versions 6.5 20250816 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250823:*:*:*:*:*:* Versions 6.5 20250823 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250830:*:*:*:*:*:* Versions 6.5 20250830 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250913:*:*:*:*:*:* Versions 6.5 20250913 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250920:*:*:*:*:*:* Versions 6.5 20250920 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20250927:*:*:*:*:*:* Versions 6.5 20250927 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251004:*:*:*:*:*:* Versions 6.5 20251004 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251010:*:*:*:*:*:* Versions 6.5 20251010 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251018:*:*:*:*:*:* Versions 6.5 20251018 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251025:*:*:*:*:*:* Versions 6.5 20251025 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251101:*:*:*:*:*:* Versions 6.5 20251101 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251115:*:*:*:*:*:* Versions 6.5 20251115 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251122:*:*:*:*:*:* Versions 6.5 20251122 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251123:*:*:*:*:*:* Versions 6.5 20251123 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251129:*:*:*:*:*:* Versions 6.5 20251129 Vulnerable ·Invisible-island
- cpe:2.3:a:invisible-island:ncurses:6.5:20251206:*:*:*:*:*:* Versions 6.5 20251206 Vulnerable ·Invisible-island
Remediation
- Fix · CNA ncurses (GNU) Fixed in 6.5-20251213
Red Hat 3 advisories
- RHSA-2026:26357 Released 2026-06-16 · Red Hat rating Moderatencurses security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) ncurses-c++-libs-6.4-14.20240127.el10_0.1, ncurses-devel-6.4-14.20240127.el10_0.1, ncurses-term-6.4-14.20240127.el10_0.1
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) ncurses-6.4-14.20240127.el10_0.1, ncurses-base-6.4-14.20240127.el10_0.1, ncurses-libs-6.4-14.20240127.el10_0.1
- RHSA-2026:7263 Released 2026-04-09 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images ncurses-6.6-1.1.hum1@aarch64, ncurses-6.6-1.1.hum1@src, ncurses-6.6-1.1.hum1@x86_64 +14
- RHSA-2026:5913 Released 2026-03-26 · Red Hat rating Moderatencurses security update
- Red Hat Enterprise Linux AppStream (v. 10) ncurses-c++-libs-6.4-15.20240127.el10_1, ncurses-devel-6.4-15.20240127.el10_1, ncurses-term-6.4-15.20240127.el10_1
- Red Hat Enterprise Linux BaseOS (v. 10) ncurses-6.4-15.20240127.el10_1, ncurses-base-6.4-15.20240127.el10_1, ncurses-libs-6.4-15.20240127.el10_1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:5913 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:26357 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:5913 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:26357 |
| Red Hat Hardened Images | Fixed | RHSA-2026:7263 |
Not affected: 5 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4
Timeline
- 2026-10-02 Threatist record created from CVE-2025-69720
- 2026-10-03 Alias added: GHSA-9952-mrqj-h4jh
References
Advisory 3
More GNU vulnerabilities
- TI-2026-19388 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root"… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05164 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… KEVCVSS 3.1HIGH 8.8
- TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-69720 · CVE Program
- CVE-2025-69720 · NVD
- FIRST EPSS
- GHSA-9952-mrqj-h4jh · GitHub Advisory Database · CC BY 4.0
- CVE-2025-69720 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences