CVE-2025-6141: GNU Ncurses

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Affected products

• GNU Ncurses: version 6.5-20250322 only
• Siemens Ruggedcom RST2428P: before V3.3 (fixed in V3.3); before V4.0 (fixed in V4.0)
• Siemens Scalance Xc-300/xr-300/xc-400/xr-500wg/xr-500 Family: before V3.3 (fixed in V3.3)
• Siemens Scalance XCH328: before V3.3 (fixed in V3.3)
• Siemens Scalance XCM324: before V3.3 (fixed in V3.3)
• Siemens Scalance XCM328: before V3.3 (fixed in V3.3)
• Siemens Scalance XCM332: before V3.3 (fixed in V3.3)
• Siemens Scalance XRH334 24 V Dc, 8xfo, Cc: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 230 V Ac, 12xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 230 V Ac, 8xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 230v Ac, 2x10g, 24xsfp, 8xsfp+: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 24 V Dc, 12xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 24 V Dc, 8xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 24v Dc, 2x10g, 24xsfp, 8xsfp+: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 2x230 V Ac, 12xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 2x230 V Ac, 8xfo: before V3.3 (fixed in V3.3)
• Siemens Scalance XRM334 2x230v Ac, 2x10g, 24xsfp, 8xsfp+: before V3.3 (fixed in V3.3)

Published 2025-06-16. Last modified 2026-06-17.