CVE-2025-6141mediumCWE-119CWE-121

CVE-2025-6141: falha de média gravidade em GNU ncurses

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ncurses+ Monitorar ncurses

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
GNU · ncurses
CVEs relacionadas — GNU ncurses

No mesmo produto, das mais perigosas para as menos.

CVE-2025-69720HIGHCVE-2025-69720EPSS 0.5%