CVE-2025-6141 - CVE House

Back to Database

Status published Medium CVE-2025-6141

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

4.8 CVSS

Vulnerability Description

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6141

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

JJLeo (VulDB User)

References

More from GNU

View All →

GNU libopts __strstr_sse2 memory corruption

GNU cflow Lexer c.c yylex buffer overflow

GNU cflow Lexer c.c yylex null pointer dereference

GNU Binutils DWARF Section dwarf.c process_debug_info memory leak

GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference

Affected Vendor

GNU

View all reports →

Affected Software

ncurses

Vulnerable Versions:

6.5-20250322, 6.5-20250329

Timeline

Official Publish: June 16th, 2025

Last Modified: June 2nd, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C

Weaknesses (CWE)

CWE-121 CWE-119

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control

T1485 Data Destruction

T1203 Exploitation for Client Execution