CVE-2025-69720

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Affected products

Linuxmint, Ubuntu, Ncurses

Invisible-island Ncurses

≤ 6.4, 6.5

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

0.4% (38th percentile)

Weakness

CWE-121, CWE-120

NVD status

Modified

Published

2026-03-19