Most recent entries from all

EUVD-2026-57160

fkie_cve-2019-15547

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled.

GHSA-32v7-ghpr-c8hg — Mishandling of format strings in ncurses

Affected: crates.io: ncurses

ncurses exposes functions from the ncurses library which: * Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. (instr, mvwinstr, etc) * Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format string attack, which trivially allows writing arbitrary data to stack memory (functions in the printw family).

gsd-2019-15547

RUSTSEC-2019-0006 — Buffer overflow and format vulnerabilities in functions exposed without unsafe

Affected: crates.io: ncurses

`ncurses` exposes functions from the ncurses library which:

- Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. (`instr`, `mvwinstr`, etc) - Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format string attack, which trivially allows writing arbitrary data to stack memory (functions in the `printw` family).

UBUNTU-CVE-2019-15547

Affected: Ubuntu:20.04:LTS: rust-ncurses, Ubuntu:22.04:LTS: rust-ncurses

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled.