PT-2026-41335

Published

2026-05-05

·

Updated

2026-05-05

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2026-453
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com