{"id":"CVE-2021-39537","revision":"f7d21c3e9b274fd3a5e352cc45b739ca","records":[{"revision":"f7d21c3e9b274fd3a5e352cc45b739ca","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-39537","aliases":[],"title":"An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.","description":"An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.","state":0,"publishedAt":"2021-09-20T00:00:00+00:00","modifiedAt":"2026-10-08T21:03:26.809+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html","https://lists.gnu.org/archive/html/bug-ncurses/2021-10/msg00023.html","http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://security.netapp.com/advisory/ntap-20230427-0012/","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-39537","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-39537","identifiers":["CVE-2021-39537"]},"retained":false,"historicalAffected":[]}],"coverage":[]}