CVE-2025-69720

Katalog CVE

CVSS 7.8 · High EPSS 0,45%

Kerentanan Stack-based Buffer Overflow pada invisible-island ncurses. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Rincian

Terbit di NVD

19 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 82 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 issue tracking · mailing list · advisory vendor
• https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 issue tracking · mailing list · advisory vendor
• https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 issue tracking · mailing list · advisory vendor
• https://github.com/Cao-Wuhui/CVE-2025-69720 exploit · advisory pihak ketiga
• https://invisible-island.net/archives/ncurses/6.5/ release notes
• https://invisible-island.net/ncurses/ product
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html