CVE catalog

CVE-2025-6141

ncurses vulnerability

Severity: Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published: Jun 16, 2025, 10:00:17 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.20% · Oct 25, 2026

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	ncurses	sid	`6.6+20260608-2`	fixed
Debian	ncurses	forky	`6.6+20260608-2`	fixed
Debian	ncurses	trixie	`6.5+20250216-2`	vulnerable
Debian	ncurses	bookworm	`6.4-4`	vulnerable
Ubuntu	ncurses	noble	Not reported	vulnerable
Ubuntu	ncurses	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib32ncurses-dev	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib32ncurses6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib32ncursesw6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib32tinfo6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib64ncurses-dev	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib64ncurses6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib64ncursesw6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	lib64tinfo6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	libncurses-dev	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	libncurses6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	libncursesw6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	libtinfo6	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses-base	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses-bin	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses-doc	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses-examples	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses-term	noble	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses	pro	`6.1+20190803-1ubuntu1`	vulnerable
Ubuntu	ncurses	pro	`6.1+20191019-1ubuntu1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1+esm1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1+esm2`	fixed
Ubuntu	ncurses	22.04	`6.2+20201114-2build1`	vulnerable
Ubuntu	ncurses	22.04	`6.2+20201114-2build2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-1`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.1`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.3`	fixed
Ubuntu	ncurses	24.04	`6.4+20230625-2`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231016-1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231121-1build1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231209-1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2.1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses	pro	`6.1+20190803-1ubuntu1`	vulnerable
Ubuntu	ncurses	pro	`6.1+20191019-1ubuntu1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1+esm1`	vulnerable
Ubuntu	ncurses	pro	`6.2-0ubuntu2.1+esm2`	fixed
Ubuntu	ncurses	22.04	`6.2+20201114-2build1`	vulnerable
Ubuntu	ncurses	22.04	`6.2+20201114-2build2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-1`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.1`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.2`	vulnerable
Ubuntu	ncurses	22.04	`6.3-2ubuntu0.3`	fixed
Ubuntu	ncurses	24.04	`6.4+20230625-2`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231016-1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231121-1build1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20231209-1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2.1`	vulnerable
Ubuntu	ncurses	24.04	`6.4+20240113-1ubuntu2.2`	fixed
Ubuntu	ncurses	25.10	`6.5+20250216-2`	vulnerable
Ubuntu	ncurses	25.10	`6.5+20250216-2build1`	vulnerable
Ubuntu	ncurses	25.10	`6.5+20250216-2ubuntu0.1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	ncurses	source	sid	`6.5+20251115-2`	not yet assigned	Not reported	[1107937]
Debian	ncurses	source	forky	`6.5+20251115-2`	not yet assigned	Not reported	[1107937]
Debian	ncurses	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1107937]
Debian	ncurses	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1107937]
Ubuntu	ncurses	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib32ncurses-dev	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib32ncurses6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib32ncursesw6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib32tinfo6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib64ncurses-dev	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib64ncurses6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib64ncursesw6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	lib64tinfo6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	libncurses-dev	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	libncurses6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	libncursesw6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	libtinfo6	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses-base	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses-bin	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses-doc	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses-examples	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses-term	deb	noble	`6.4+20240113-1ubuntu2.2`	Not reported	Not reported	Not reported
Ubuntu	ncurses	deb	pro	`6.2-0ubuntu2.1+esm2`	Not reported	USN-8709-1	Not reported
Ubuntu	ncurses	deb	22.04	`6.3-2ubuntu0.3`	Not reported	USN-8709-1	Not reported
Ubuntu	ncurses	deb	24.04	`6.4+20240113-1ubuntu2.2`	Not reported	USN-8709-1	Not reported
Ubuntu	ncurses	deb	pro	`6.2-0ubuntu2.1+esm2`	Not reported	UBUNTU-CVE-2025-6141	Not reported
Ubuntu	ncurses	deb	22.04	`6.3-2ubuntu0.3`	Not reported	UBUNTU-CVE-2025-6141	Not reported
Ubuntu	ncurses	deb	24.04	`6.4+20240113-1ubuntu2.2`	Not reported	UBUNTU-CVE-2025-6141	Not reported

[Debian bug #1107937]

Notes

[trixie] ncurses: Minor issue [bookworm] ncurses: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[lib32ncurses6]Affected
Source package: [ncurses]
Details (1)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[lib32ncurses-dev]Affected
Source package: [ncurses]
Details (1)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[lib32ncursesw6]Affected
Source package: [ncurses]
Details (1)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[lib32tinfo6]Affected
Source package: [ncurses]
Details (1)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncurses5]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncurses5-dev]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncurses6]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncurses-dev]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncursesw5]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncursesw5-dev]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libncursesw6]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libtinfo5]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libtinfo6]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[libtinfo-dev]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[ncurses-base]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[ncurses-bin]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[ncurses-doc]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[ncurses-examples]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · amd64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · arm64 · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
[ncurses-term]Affected
Source package: [ncurses]
Details (2)
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12
- 6.4-4 · all · bookworm
  Affected
  usn · ncurses · debian · bookworm; usn · ncurses · debian · 12

[Debian 13 (Trixie)]

[lib32ncurses6]Affected
Source package: [ncurses]
Details (1)
- 6.5+20250216-2 · amd64 · trixie
  Affected
  usn · ncurses · debian · 13

Next results

Observed: Oct 24, 2026, 9:52:41 PM UTC

References

[CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [Ubuntu Security Notices (USN)]