CVE-2025-69720

Description

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

PUBLISHED Reserved 2026-01-09 | Published 2026-03-19 | Updated 2026-06-02 | Assigner mitre

Problem types

CWE-121 Stack-based Buffer Overflow

Product status

References

cert-portal.siemens.com/productcert/html/ssa-253495.html

marc.info/?l=ncurses-bug&m=176539968328570&w=2

marc.info/?l=ncurses-bug&m=176540731801330&w=2

marc.info/?l=ncurses-bug&m=176545557728083&w=2

github.com/Cao-Wuhui/CVE-2025-69720

invisible-island.net/archives/ncurses/6.5/

invisible-island.net/ncurses/

cve.org (CVE-2025-69720)

nvd.nist.gov (CVE-2025-69720)

Download JSON