CVE-2021-39537: Apple Mac OS X

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

Affected products

• Apple Mac OS X: version 10.12.6 only
• Apple macOS: version 11.7 only; version 13.0 only
• Invisible-Island Ncurses: up to and including 6.2.1

Published 2021-09-20. Last modified 2026-10-08.