The ncurses library, which provides terminal-independent screen updating routines and related utilities, contains a buffer overflow vulnerability identified as CVE-2025-69720. This flaw could potentially lead to arbitrary code execution if exploited. Red Hat Product Security has released an update for Red Hat Enterprise Linux 10.0 Extended Update Support to fix this vulnerability. The advisory classifies the severity as moderate and references updated package versions for various architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS score is provided in the advisory, and no known active exploits have been reported.

Successful exploitation of this buffer overflow vulnerability could allow an attacker to execute arbitrary code on affected systems running vulnerable versions of the ncurses library. This could compromise system integrity and security. However, no known exploits in the wild have been reported, and the vendor rates the impact as moderate.

Red Hat has released updated ncurses packages that address this buffer overflow vulnerability. Users of Red Hat Enterprise Linux 10.0 Extended Update Support should apply the provided security updates as detailed in the Red Hat advisory RHSA-2026:26357. For update instructions, refer to https://access.redhat.com/articles/11258. Applying these updates will mitigate the vulnerability. No additional mitigation steps are indicated by the vendor.