Paper/Archive/CVE-2025-69720

CVE-2025-69720

GNU ncurses — The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Description · from the CVE record

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Affected

ProductAffectedFixed inSource

ncurses< 6.5-202512136.5-20251213CNA

RUGGEDCOM RST2428P< V4.0V4.0siemens-SADP

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

mitre (CNA)7.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total