A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jun 18, 2025 | Jun 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses | Oct 24, 2025 | Oct 10, 2025 |
| Ubuntu | — | Upgrade ncurses-bin (Ubuntu Pro)Upgrade libncurses6Upgrade libncurses5 (Ubuntu Pro)Upgrade libncurses5Upgrade libncurses6 (Ubuntu Pro)Upgrade ncurses-binUpgrade libtinfo5 (Ubuntu Pro)Upgrade libtinfo6Upgrade libtinfo5Upgrade libtinfo6 (Ubuntu Pro) | Sep 2, 2026 | Sep 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 17, 2025 | Jun 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub