CVE-2022-29458: Apple macOS

High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days.

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

Affected products

• Apple macOS: before 13.0 (fixed in 13.0)
• Debian Debian Linux: version 10.0 only
• Invisible-Island Ncurses: before 6.3 (fixed in 6.3); version 6.3 only

Published 2022-04-18. Last modified 2026-07-27.