PT-2026-41331 · Julia · Ncurses Jll

Published 2026-05-05 · Updated 2026-05-05

OSV

Buffer Overflow vulnerability in postprocess terminfo function in tinfo/parse entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Exploit

Related Identifiers

JLSEC-2026-449

Affected Products

Ncurses Jll

References · 10

• 🔥 https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md · Exploit
• https://osv.dev/vulnerability/JLSEC-2026-449 · Vendor Advisory
• http://seclists.org/fulldisclosure/2023/Dec/9 · Note
• http://seclists.org/fulldisclosure/2023/Dec/11 · Note
• https://support.apple.com/kb/HT214038 · Note
• http://seclists.org/fulldisclosure/2023/Dec/10 · Note
• https://security.netapp.com/advisory/ntap-20231006-0005 · Note
• https://support.apple.com/kb/HT214037 · Note
• https://support.apple.com/kb/HT214036 · Note
• https://lists.debian.org/debian-lts-announce/2023/09/msg00033.html · Note