CVE-2025-69720: gnu ncurses Stack-based Buffer Overflow
Modified
AliasesSUSE-SU-2026:1499-1SUSE-SU-2026:1510-1SUSE-SU-2026:21247-1SUSE-SU-2026:21261-1SUSE-SU-2026:22228-1SUSE-SU-2026:22294-1RHSA-2026:26357RHSA-2026:5913RHSA-2026:7263UBUNTU-CVE-2025-69720USN-8503-1DEBIAN-CVE-2025-69720openSUSE-SU-2026:20992-1
Published 19-03-2026Last modified 02-06-2026
Vulnerability summary
CVE-2025-69720 is a high (CVSS 7.8) Stack-based Buffer Overflow vulnerability in gnu ncurses. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 40.2% of scored vulnerabilities. 1 public exploit is recorded.
Priority
Prioritisepublic exploit
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
0.46%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github
Timeline
- 19-03-2026PublishedVulnerability first disclosed.
- 02-06-2026Last modifiedVulnerability information updated.
Description
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSources5 sources · 7.3–7.8
- CVE.orgCNA7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:LDiffers
- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:LDiffers
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
40%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.45% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundCve 2025 69720
Maturity: poc
Weaknesses
CWE · root cause- CWE-121Stack-based Buffer OverflowThe product writes past the end of a buffer that was allocated on the stack.
- CWE-120Buffer Copy without Checking Size of InputThe product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Affected systems
Version check
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Suse13 products
- ncurses&distro=SUSE Linux Enterprise Micro 5.2< 6.1-150000.5.33.1
- ncurses&distro=SUSE Linux Enterprise Micro 5.3< 6.1-150000.5.33.1
- ncurses&distro=SUSE Linux Enterprise Micro 5.4< 6.1-150000.5.33.1
- ncurses&distro=SUSE Linux Enterprise Micro 5.5< 6.1-150000.5.33.1
- ncurses&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 6.1-150000.5.33.1
Redhat12 products
- ncurses< 0:6.4-14.20240127.el10_0.1 | < 0:6.4-15.20240127.el10_1 | < 0:6.6-1.1.hum1
- ncurses-base< 0:6.4-14.20240127.el10_0.1 | < 0:6.4-15.20240127.el10_1 | < 0:6.6-1.1.hum1
- ncurses-c++-libs< 0:6.4-14.20240127.el10_0.1 | < 0:6.4-15.20240127.el10_1 | < 0:6.6-1.1.hum1
- ncurses-c++-libs-debuginfo< 0:6.4-14.20240127.el10_0.1 | < 0:6.4-15.20240127.el10_1
- ncurses-compat-libs< 0:6.6-1.1.hum1
Debian1 product
- ncursesAll versions (No fix recorded) | < 6.6+20251231-1
Gnu1 product
- ncurses< 6.5-20251213
Invisible-island1 product
- ncurses≤ 6.4 | 6.5:20240427 | 6.5:20240504 | 6.5:20240511 | 6.5:20240518 | 6.5:20240519 | 6.5:20240525 | 6.5:20240601 | 6.5:20240608 | 6.5:20240615 | 6.5:20240622 | 6.5:20240629 | 6.5:20240706 | 6.5:20240713 | 6.5:20240720 | 6.5:20240727 | 6.5:20240810 | 6.5:20240817 | 6.5:20240824 | 6.5:20240831 | 6.5:20240914 | 6.5:20240922 | 6.5:20240928 | 6.5:20241006 | 6.5:20241019 | 6.5:20241026 | 6.5:20241102 | 6.5:20241109 | 6.5:20241123 | 6.5:20241130 | 6.5:20241207 | 6.5:20241214 | 6.5:20241221 | 6.5:20241228 | 6.5:20250104 | 6.5:20250111 | 6.5:20250118 | 6.5:20250125 | 6.5:20250201 | 6.5:20250208 | 6.5:20250215 | 6.5:20250216 | 6.5:20250222 | 6.5:20250301 | 6.5:20250308 | 6.5:20250315 | 6.5:20250322 | 6.5:20250329 | 6.5:20250405 | 6.5:20250412 | 6.5:20250419 | 6.5:20250426 | 6.5:20250503 | 6.5:20250510 | 6.5:20250517 | 6.5:20250524 | 6.5:20250531 | 6.5:20250614 | 6.5:20250621 | 6.5:20250628 | 6.5:20250705 | 6.5:20250712 | 6.5:20250720 | 6.5:20250726 | 6.5:20250802 | 6.5:20250809 | 6.5:20250816 | 6.5:20250823 | 6.5:20250830 | 6.5:20250913 | 6.5:20250920 | 6.5:20250927 | 6.5:20251004 | 6.5:20251010 | 6.5:20251018 | 6.5:20251025 | 6.5:20251101 | 6.5:20251115 | 6.5:20251122 | 6.5:20251123 | 6.5:20251129 | 6.5:20251206
Opensuse1 product
- ncurses&distro=openSUSE Leap 16.0< 6.5.20250531-160000.3.1
Ubuntu1 product
- ncurses< 6.3-2ubuntu0.2 | < 6.4+20240113-1ubuntu2.1 | < 6.5+20250216-2ubuntu0.1 | < 5.9+20140118-1ubuntu1+esm6 | < 6.0+20160213-1ubuntu1+esm6 | < 6.1-1ubuntu1.18.04.1+esm3 | < 6.2-0ubuntu2.1+esm1
7 vendors · 30 products
References
31 links- invisible-island.net/archives/ncurses/6.5/Release Notes
Show all 31 references
- images.redhat.comARTICLE
