CVE-2017-10685: Invisible-Island Ncurses

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

Affected products

• Invisible-Island Ncurses: version 6.0 only

Published 2017-06-29. Last modified 2026-07-23.