PT-2026-26293 · Ncurses · Ncurses

Published 2026-03-19 · Updated 2026-04-21 · CVE-2025-69720

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ncurses versions 6.4 and 6.5

Description The software contains a buffer overflow issue in the analyze string() function within the progs/infocmp.c file.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-120

Related Identifiers

ALSA-2026:5913

CVE-2025-69720

ECHO-01C4-4A1E-F949

OESA-2026-1904

OESA-2026-1905

OESA-2026-1906

RHSA-2026:5913

RHSA-2026:7263

SUSE-SU-2026:1499-1

SUSE-SU-2026:1510-1

SUSE-SU-2026:21247-1

SUSE-SU-2026:21261-1

Affected Products

Ncurses

References · 38

• 🔥 https://github.com/Cao-Wuhui/CVE-2025-69720 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:21261-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-69720 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69720 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1510-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1906 · Vendor Advisory
• https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1499-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-69720 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21247-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-69720 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-69720 · Vendor Advisory
• https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 · Vendor Advisory
• https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-5913.html · Vendor Advisory