ZeroDay Findings
Sign inSign up

Findings

CVE-2019-17595

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

Published Oct 14, 2019 · updated Oct 14, 2026 · invisible-island ncurses

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2019 · NIST NVD

    Detected

    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

  2. Oct 14, 2026 · NIST NVD

    Updated

    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

Affected

  • cpe invisible-island/ncursesversion unspecified
  • cpe opensuse/leap15.0
  • cpe opensuse/leap15.1

Sources

  • CVE.orgVulnerability recordCVE-2019-17595

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-17595

    30-day exploitation probability 2.2%

    first.org
  • NIST NVDVulnerability recordCVE-2019-17595

    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

    nvd.nist.gov

References