DEBIAN-CVE-2025-69720
- Source
- https://security-tracker.debian.org/tracker/CVE-2025-69720
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-69720.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-69720
- Upstream
- Published
- 2026-03-19T15:16:21Z
- Modified
- 2026-09-01T20:05:57Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
- References
Affected packages
Debian:12 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
6.*
6.4-4
6.4+20230603-1
6.4+20230625-1
6.4+20230625-2
6.4+20231007-1
6.4+20231016-1
6.4+20231118-1
6.4+20231121-1
6.4+20231209-1
6.4+20240113-1
6.4+20240414-1
6.5-1
6.5-2
6.5+20250125-1
6.5+20250125-2
6.5+20250216-1
6.5+20250216-2
6.5+20251115-1
6.5+20251115-2
6.5+20251122-1
6.5+20251123-1
6.6+20251231-1
6.6+20260608-1
6.6+20260608-2
Debian:13 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:14 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source&distro=forky