CVE-2025-69720 is a buffer overflow vulnerability (CWE-120) in the analyze_string() function of the ncurses library affecting Red Hat Enterprise Linux 10.0.z and 10.1.z. The vulnerability can be triggered through the infocmp utility, allowing an attacker with local privileges or user interaction to execute arbitrary code, cause denial of service, or leak sensitive information. Red Hat has identified this as a moderate impact issue specific to these versions. Other Red Hat Enterprise Linux versions and OpenShift Container Platform are not affected. The vulnerability requires processing of malicious data by an affected application. Red Hat provides detailed advisory information but does not currently provide a CVSS score for this issue. No known exploits are reported in the wild.

Successful exploitation of this buffer overflow can lead to arbitrary code execution, denial of service via application crashes, data corruption, or unauthorized disclosure of sensitive information. The vulnerability requires local access with some privileges or user interaction to trigger. It affects confidentiality, integrity, and availability of the affected system components running vulnerable versions of ncurses on Red Hat Enterprise Linux 10.0.z and 10.1.z.

Red Hat has published an advisory (RHSA-2026:26357) acknowledging the vulnerability and its impact. However, no explicit patch or fix availability is stated in the provided data. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-69720 for current remediation guidance. Until a fix is available, avoid processing untrusted input with affected versions of the infocmp utility or ncurses library. Monitor Red Hat communications for updates on patches or mitigations.