Findings

CVE-2025-69720

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Published Mar 19, 2026 · updated Jun 17, 2026 · invisible-island ncurses

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 19, 2026 · NIST NVD

    Detected

    The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

  2. Jun 17, 2026 · NIST NVD

    Updated

    The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

Affected

  • cpe invisible-island/ncursesversion unspecified
  • cpe invisible-island/ncurses6.5

Sources

  • CVE.orgVulnerability recordCVE-2025-69720

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-69720

    The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

    nvd.nist.gov

References