{"id":"JLSEC-2026-1242","summary":"ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...","details":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in `analyze_string` in `progs/infocmp.c`.","modified":"2026-08-10T20:44:09.715433421Z","published":"2026-08-10T20:25:33.558Z","upstream":["CVE-2025-69720","EUVD-2025-208879","GHSA-9952-mrqj-h4jh"],"database_specific":{"sources":[{"modified":"2026-06-17T10:00:50.423Z","published":"2026-03-19T15:16:21.293Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-69720","html_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69720","database_specific":{"status":"Modified"},"id":"CVE-2025-69720","imported":"2026-08-09T03:43:47.272Z"},{"modified":"2026-06-02T15:33:01Z","published":"2026-03-19T15:31:21Z","url":"https://api.github.com/advisories/GHSA-9952-mrqj-h4jh","html_url":"https://github.com/advisories/GHSA-9952-mrqj-h4jh","id":"GHSA-9952-mrqj-h4jh","imported":"2026-08-09T03:43:47.513Z"},{"published":"2026-03-19T00:00:00Z","url":"https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2025-208879","html_url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208879","id":"EUVD-2025-208879","imported":"2026-08-09T03:43:47.152Z","modified":"2026-06-02T13:00:33Z"}],"license":"CC-BY-4.0"},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"},{"type":"WEB","url":"https://github.com/Cao-Wuhui/CVE-2025-69720"},{"type":"WEB","url":"https://github.com/advisories/GHSA-9952-mrqj-h4jh"},{"type":"WEB","url":"https://invisible-island.net/archives/ncurses/6.5"},{"type":"WEB","url":"https://invisible-island.net/archives/ncurses/6.5/"},{"type":"WEB","url":"https://invisible-island.net/ncurses"},{"type":"WEB","url":"https://invisible-island.net/ncurses/"},{"type":"WEB","url":"https://marc.info/?l=ncurses-bug&m=176539968328570&w=2"},{"type":"WEB","url":"https://marc.info/?l=ncurses-bug&m=176540731801330&w=2"},{"type":"WEB","url":"https://marc.info/?l=ncurses-bug&m=176545557728083&w=2"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69720"}],"affected":[{"package":{"name":"Ncurses_jll","ecosystem":"Julia","purl":"pkg:julia/Ncurses_jll?uuid=68e3532b-a499-55ff-9963-d1c0c0748b3a"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.6.0+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1242.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}