CVE-2025-69720

Exploit

EPSS 0.45%
Veröffentlicht 19.03.2026 00:00:00
Zuletzt bearbeitet 02.06.2026 14:16:37
Erkennungen
Login

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 10

NVD 82 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Invisible-island ≫ Ncurses Version <= 6.4

Invisible-island ≫ Ncurses Version 6.5 Update 20240427

Invisible-island ≫ Ncurses Version 6.5 Update 20240504

Invisible-island ≫ Ncurses Version 6.5 Update 20240511

Invisible-island ≫ Ncurses Version 6.5 Update 20240518

Invisible-island ≫ Ncurses Version 6.5 Update 20240519

Invisible-island ≫ Ncurses Version 6.5 Update 20240525

Invisible-island ≫ Ncurses Version 6.5 Update 20240601

Invisible-island ≫ Ncurses Version 6.5 Update 20240608

Invisible-island ≫ Ncurses Version 6.5 Update 20240615

Invisible-island ≫ Ncurses Version 6.5 Update 20240622

Invisible-island ≫ Ncurses Version 6.5 Update 20240629

Invisible-island ≫ Ncurses Version 6.5 Update 20240706

Invisible-island ≫ Ncurses Version 6.5 Update 20240713

Invisible-island ≫ Ncurses Version 6.5 Update 20240720

Invisible-island ≫ Ncurses Version 6.5 Update 20240727

Invisible-island ≫ Ncurses Version 6.5 Update 20240810

Invisible-island ≫ Ncurses Version 6.5 Update 20240817

Invisible-island ≫ Ncurses Version 6.5 Update 20240824

Invisible-island ≫ Ncurses Version 6.5 Update 20240831

Invisible-island ≫ Ncurses Version 6.5 Update 20240914

Invisible-island ≫ Ncurses Version 6.5 Update 20240922

Invisible-island ≫ Ncurses Version 6.5 Update 20240928

Invisible-island ≫ Ncurses Version 6.5 Update 20241006

Invisible-island ≫ Ncurses Version 6.5 Update 20241019

Invisible-island ≫ Ncurses Version 6.5 Update 20241026

Invisible-island ≫ Ncurses Version 6.5 Update 20241102

Invisible-island ≫ Ncurses Version 6.5 Update 20241109

Invisible-island ≫ Ncurses Version 6.5 Update 20241123

Invisible-island ≫ Ncurses Version 6.5 Update 20241130

Invisible-island ≫ Ncurses Version 6.5 Update 20241207

Invisible-island ≫ Ncurses Version 6.5 Update 20241214

Invisible-island ≫ Ncurses Version 6.5 Update 20241221

Invisible-island ≫ Ncurses Version 6.5 Update 20241228

Invisible-island ≫ Ncurses Version 6.5 Update 20250104

Invisible-island ≫ Ncurses Version 6.5 Update 20250111

Invisible-island ≫ Ncurses Version 6.5 Update 20250118

Invisible-island ≫ Ncurses Version 6.5 Update 20250125

Invisible-island ≫ Ncurses Version 6.5 Update 20250201

Invisible-island ≫ Ncurses Version 6.5 Update 20250208

Invisible-island ≫ Ncurses Version 6.5 Update 20250215

Invisible-island ≫ Ncurses Version 6.5 Update 20250216

Invisible-island ≫ Ncurses Version 6.5 Update 20250222

Invisible-island ≫ Ncurses Version 6.5 Update 20250301

Invisible-island ≫ Ncurses Version 6.5 Update 20250308

Invisible-island ≫ Ncurses Version 6.5 Update 20250315

Invisible-island ≫ Ncurses Version 6.5 Update 20250322

Invisible-island ≫ Ncurses Version 6.5 Update 20250329

Invisible-island ≫ Ncurses Version 6.5 Update 20250405

Invisible-island ≫ Ncurses Version 6.5 Update 20250412

Invisible-island ≫ Ncurses Version 6.5 Update 20250419

Invisible-island ≫ Ncurses Version 6.5 Update 20250426

Invisible-island ≫ Ncurses Version 6.5 Update 20250503

Invisible-island ≫ Ncurses Version 6.5 Update 20250510

Invisible-island ≫ Ncurses Version 6.5 Update 20250517

Invisible-island ≫ Ncurses Version 6.5 Update 20250524

Invisible-island ≫ Ncurses Version 6.5 Update 20250531

Invisible-island ≫ Ncurses Version 6.5 Update 20250614

Invisible-island ≫ Ncurses Version 6.5 Update 20250621

Invisible-island ≫ Ncurses Version 6.5 Update 20250628

Invisible-island ≫ Ncurses Version 6.5 Update 20250705

Invisible-island ≫ Ncurses Version 6.5 Update 20250712

Invisible-island ≫ Ncurses Version 6.5 Update 20250720

Invisible-island ≫ Ncurses Version 6.5 Update 20250726

Invisible-island ≫ Ncurses Version 6.5 Update 20250802

Invisible-island ≫ Ncurses Version 6.5 Update 20250809

Invisible-island ≫ Ncurses Version 6.5 Update 20250816

Invisible-island ≫ Ncurses Version 6.5 Update 20250823

Invisible-island ≫ Ncurses Version 6.5 Update 20250830

Invisible-island ≫ Ncurses Version 6.5 Update 20250913

Invisible-island ≫ Ncurses Version 6.5 Update 20250920

Invisible-island ≫ Ncurses Version 6.5 Update 20250927

Invisible-island ≫ Ncurses Version 6.5 Update 20251004

Invisible-island ≫ Ncurses Version 6.5 Update 20251010

Invisible-island ≫ Ncurses Version 6.5 Update 20251018

Invisible-island ≫ Ncurses Version 6.5 Update 20251025

Invisible-island ≫ Ncurses Version 6.5 Update 20251101

Invisible-island ≫ Ncurses Version 6.5 Update 20251115

Invisible-island ≫ Ncurses Version 6.5 Update 20251122

Invisible-island ≫ Ncurses Version 6.5 Update 20251123

Invisible-island ≫ Ncurses Version 6.5 Update 20251129

Invisible-island ≫ Ncurses Version 6.5 Update 20251206

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.365

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE	7.3	1.8	5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://marc.info/?l=ncurses-bug&m=176539968328570&w=2

Vendor Advisory

Mailing List

Issue Tracking

https://marc.info/?l=ncurses-bug&m=176540731801330&w=2

Vendor Advisory

Mailing List

Issue Tracking

https://marc.info/?l=ncurses-bug&m=176545557728083&w=2

Vendor Advisory

Mailing List

Issue Tracking

https://github.com/Cao-Wuhui/CVE-2025-69720

Third Party Advisory

Exploit

https://invisible-island.net/archives/ncurses/6.5/

Release Notes

https://invisible-island.net/ncurses/

Product

https://cert-portal.siemens.com/productcert/html/ssa-253495.html

https://nvd.nist.gov/vuln/detail/CVE-2025-69720

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-69720

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-69720

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-69720