Heap-based Buffer Overflow in ncurses Affects Multiple Platforms

CVE-2021-39537

What is CVE-2021-39537?

A heap-based buffer overflow has been identified in ncurses, specifically within the _nc_captoinfo function in captoinfo.c. This vulnerability can be exploited to lead to unexpected behavior in affected applications, potentially allowing attackers to execute arbitrary code. It is critical for users and system administrators to update ncurses to the latest version to mitigate risks associated with this vulnerability.

References