CVE-2025-69720

Опубликовано: 19 мар. 2026

Источник: nvd

CVSS3: 7.3

CVSS3: 7.8

CVSS3: 9.8

EPSS Низкий

Описание

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Ссылки

https://github.com/Cao-Wuhui/CVE-2025-69720
Exploit
Third Party Advisory
https://invisible-island.net/archives/ncurses/6.5/
Release Notes
https://invisible-island.net/ncurses/
Product
https://marc.info/?l=ncurses-bug&m=176539968328570&w=2
Issue Tracking
Mailing List
Vendor Advisory
https://marc.info/?l=ncurses-bug&m=176540731801330&w=2
Issue Tracking
Mailing List
Vendor Advisory
https://marc.info/?l=ncurses-bug&m=176545557728083&w=2
Issue Tracking
Mailing List
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-253495.html

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:invisible-island:ncurses:*:*:*:*:*:*:*:*

Версия до 6.4 (включая)

cpe:2.3:a:invisible-island:ncurses:6.5:20240427:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240504:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240511:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240518:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240519:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240525:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240601:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240608:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240615:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240622:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240629:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240706:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240713:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240720:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240727:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240810:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240817:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240824:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240831:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240914:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240922:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20240928:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241006:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241019:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241026:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241102:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241109:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241123:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241130:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241207:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241214:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241221:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20241228:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250104:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250111:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250118:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250125:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250201:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250208:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250215:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250216:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250222:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250301:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250308:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250315:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250322:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250329:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250405:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250412:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250419:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250426:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250503:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250510:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250517:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250524:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250531:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250614:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250621:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250628:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250705:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250712:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250720:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250726:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250802:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250809:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250816:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250823:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250830:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250913:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250920:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20250927:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251004:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251010:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251018:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251025:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251101:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251115:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251122:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251123:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251129:*:*:*:*:*:*

cpe:2.3:a:invisible-island:ncurses:6.5:20251206:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00447

Низкий

7.3 High

CVSS3

7.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121

CWE-120

Связанные уязвимости

CVE-2025-69720

CVSS3: 7.3

ubuntu

4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVE-2025-69720

CVSS3: 7.8

redhat

4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVE-2025-69720

CVSS3: 9.8

msrc

4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVE-2025-69720

CVSS3: 7.3

debian

4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a sta ...

openSUSE-SU-2026:20992-1

suse-cvrf

около 1 месяца назад

Security update for ncurses

EPSS

Процентиль: 37%

0.00447

Низкий

7.3 High

CVSS3

7.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121

CWE-120