CVE-2025-69720
published 2026-03-19CVE-2025-69720: The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
PriorityP343high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.41%
33.5th percentile
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ncurses | < ncurses 6.6+20251231-1 (forky) | ncurses 6.6+20251231-1 (forky) |
| gnu | ncurses | < 6.5-20251213 | 6.5-20251213 |
| gnu | ncurses | >= 0 < 6.6+20251231-1 | 6.6+20251231-1 |
| invisible-island | ncurses | <= 6.4 | — |
| invisible-island | ncurses | — | — |
| msrc | azl3_ncurses_6.4-2_on_azure_linux_3.0 | — | — |
| msrc | cbl2_ncurses_6.4-3_on_cbl_mariner_2.0 | — | — |
| ubuntu | ncurses | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_msrc9.8CRITICAL
vendor_debian7.3HIGH
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
ncurses vulnerability
vendor_ubuntu·2026-07-02
CVE-2025-69720 ncurses vulnerability
Title: ncurses vulnerability
Summary: ncurses could be made to crash if it opened a specially crafted
file.
It was discovered that ncurses incorrectly handled certain terminfo
entries in the infocmp tool. An attacker could possibly use this issue
to cause a denial of service via a crafted terminfo file.
The default compiler options for affected releases should reduce the
vulnerability to a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
vendor_redhat·2026-03-19·CVSS 7.3
CVE-2025-69720 [HIGH] CWE-120 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
A flaw was found in ncurses. This vulnerability, a buffer overflow, exists within the `analyze_string()` function. An attacker could potentially exploit this to execute unauthorized code on the affected system, which might lead to a denial of service in the affected application, the corruption of data, or sensitive information being revealed to an attacker.
Statement: This Moderate impact vulnerability in ncurses affects Red Hat Enterprise Linux 10.0.z and 10.1.z. A buffer overflow in the `analyze_string()` function, exploitable through the `infocmp` utility, could lead t
Microsoft
CVE-2025-69720: Mariner: Mariner
mitre: mitre
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn
vendor_msrc·2026-03-10·CVSS 9.8
CVE-2025-69720 [HIGH] CVE-2025-69720: Mariner: Mariner
mitre: mitre
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn
Mariner: Mariner
mitre: mitre
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Debian
CVE-2025-69720: ncurses - The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based b...
vendor_debian·2025·CVSS 7.3
CVE-2025-69720 [HIGH] CVE-2025-69720: ncurses - The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based b...
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 6.6+20251231-1)
sid: resolved (fixed in 6.6+20251231-1)
trixie: open
GHSA
GHSA-9952-mrqj-h4jh: ncurses v6
ghsa_unreviewed·2026-03-19
CVE-2025-69720 [CRITICAL] CWE-120 GHSA-9952-mrqj-h4jh: ncurses v6
ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().
OSV
CVE-2025-69720: The infocmp command-line tool in ncurses before 6
osv·2026-03-19·CVSS 7.8
CVE-2025-69720 [HIGH] CVE-2025-69720: The infocmp command-line tool in ncurses before 6
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2025-69720 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.3
CVE-2025-69720 [HIGH] CVE-2025-69720 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-69720 :
NixOS vulnerability analysis and mitigation
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
Wiz Threat Research note: This vulnerability's initial access potential has been overridden to FALSE by the Wiz Research team, as it is not confirmed to allow RCE, only stack-based buffer overflow.
Source : NVD
## 7.8
Score
Published March 19, 2026
Severity HIGH
CNA Score 7.3
Affected Technologies
NixOS
CBL Mariner
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 5.7
Exploitation Probability (EPSS) N/A
Affected packages and libraries
ncurses-term
ncurses
Sources
NVD
CBL-Mariner 2.0 S
Bugzilla
CVE-2025-69720 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
bugzilla·2026-03-19·CVSS 7.8
CVE-2025-69720 [HIGH] CVE-2025-69720 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
CVE-2025-69720 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:5913 https://access.redhat.com/errata/RHSA-2026:5913
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10.0 Extended Update Support
Via RHSA-2026:26357 https://access.redhat.com/errata/RHSA-2026:26357
https://github.com/Cao-Wuhui/CVE-2025-69720https://invisible-island.net/archives/ncurses/6.5/https://invisible-island.net/ncurses/https://marc.info/?l=ncurses-bug&m=176539968328570&w=2https://marc.info/?l=ncurses-bug&m=176540731801330&w=2https://marc.info/?l=ncurses-bug&m=176545557728083&w=2https://cert-portal.siemens.com/productcert/html/ssa-253495.html
2026-03-19
Published