https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:03:46 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:5913 <p><strong>Affected:</strong> AlmaLinux:10: ncurses-base, AlmaLinux:10: ncurses-term</p> <p>The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.</p> <p>Security Fix(es):</p> <p>* ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: ncurses-base, AlmaLinux:10: ncurses-term</p> <p>The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.</p> <p>Security Fix(es):</p> <p>* ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:5913 https://cve.radiocsirt.org/vuln/bdu:2026-12826 bdu:2026-12826 https://cve.radiocsirt.org/vuln/bdu:2026-12826 https://cve.radiocsirt.org/vuln/bell-cve-2025-69720 <p><strong>Affected:</strong> Alpaquita:23: ncurses, Alpaquita:25: ncurses, Alpaquita:stream: ncurses, BellSoft Hardened Containers:23: ncurses, BellSoft Hardened Containers:25: ncurses, BellSoft Hardened Containers:stream: ncurses</p> <p><strong>Affected:</strong> Alpaquita:23: ncurses, Alpaquita:25: ncurses, Alpaquita:stream: ncurses, BellSoft Hardened Containers:23: ncurses, BellSoft Hardened Containers:25: ncurses, BellSoft Hardened Containers:stream: ncurses</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-69720 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0376 https://cve.radiocsirt.org/vuln/euvd-2026-323848 EUVD-2026-323848 https://cve.radiocsirt.org/vuln/euvd-2026-323848 https://cve.radiocsirt.org/vuln/fkie_cve-2025-69720 <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.</p> <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-69720 https://cve.radiocsirt.org/vuln/ghsa-9952-mrqj-h4jh <p>ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().</p> <p>ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string().</p> https://cve.radiocsirt.org/vuln/ghsa-9952-mrqj-h4jh https://cve.radiocsirt.org/vuln/icsa-26-188-05 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/icsa-26-188-05 https://cve.radiocsirt.org/vuln/msrc_cve-2025-69720 msrc_CVE-2025-69720 https://cve.radiocsirt.org/vuln/msrc_cve-2025-69720 https://cve.radiocsirt.org/vuln/oesa-2026-1807 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ncurses</p> <p>The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses. Security Fix(es):</p> <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ncurses</p> <p>The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses. Security Fix(es):</p> <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1807 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20992-1 <p>Security update for ncurses</p> <p>Security update for ncurses</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20992-1 https://cve.radiocsirt.org/vuln/rhsa-2026:26357 <p>ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.</p> <p>ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/rhsa-2026:26357 https://cve.radiocsirt.org/vuln/ssa-253495 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/ssa-253495 https://cve.radiocsirt.org/vuln/suse-su-2026:1499-1 <p>Security update for ncurses</p> <p>Security update for ncurses</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1499-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-69720 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ncurses, Ubuntu:Pro:16.04:LTS: ncurses, Ubuntu:Pro:18.04:LTS: ncurses, Ubuntu:Pro:20.04:LTS: ncurses, Ubuntu:22.04:LTS: ncurses, Ubuntu:24.04:LTS: ncurses, Ubuntu:25.10: ncurses</p> <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ncurses, Ubuntu:Pro:16.04:LTS: ncurses, Ubuntu:Pro:18.04:LTS: ncurses, Ubuntu:Pro:20.04:LTS: ncurses, Ubuntu:22.04:LTS: ncurses, Ubuntu:24.04:LTS: ncurses, Ubuntu:25.10: ncurses</p> <p>The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-69720 https://cve.radiocsirt.org/vuln/vde-2026-088 <p>The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.</p> <p>The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25</p> <p>All other vulnerabilities are to be fixed in the upcoming releases.</p> <p>The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.</p> <p>The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25</p> <p>All other vulnerabilities are to be fixed in the upcoming releases.</p> https://cve.radiocsirt.org/vuln/vde-2026-088 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0875 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (ncurses) ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (ncurses) ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0875