What you need to know today.
Ncurses, Jackson-databind, Capstone, and CImg Library face multiple vulnerabilities, with some allowing remote code execution.
Multiple vulnerabilities in GNU ncurses 6.0 and 6.1 could allow for remote code execution or denial of service. Flaws include format string vulnerabilities, stack-based buffer overflows in fmt_entry and _nc_write_entry, NULL pointer dereferences in functions like next_char and _nc_name_match, and illegal address accesses in various string manipulation and parsing functions. These issues could be triggered by crafted terminfo files or untrusted terminfo data, potentially leading to application crashes or arbitrary code execution. CVEs include CVE-2017-10685, CVE-2017-10684, CVE-2017-16879, CVE-2017-13728, CVE-2017-11113, CVE-2017-11112, CVE-2018-19217, CVE-2017-13734, CVE-2017-13733, CVE-2017-13732, CVE-2017-13731, CVE-2017-13730, CVE-2017-13729, and CVE-2018-19211.
A critical vulnerability in Jackson-databind before 2.9.10.7, CVE-2021-20190, allows for remote code execution due to mishandling the interaction between serialization gadgets and typing. This flaw poses a significant risk to data confidentiality, integrity, and system availability. Exploitation could lead to unauthorized access or control over affected systems.
A segmentation violation vulnerability in ncurses 6.3 before patch 20220416, CVE-2022-29458, stems from an out-of-bounds read in the convert_strings function within the terminfo library. This could lead to a denial of service by causing application crashes. The vulnerability is located in tinfo/read_entry.c.
In the Capstone disassembly framework, versions prior to 6.0.0-Alpha8 and 5.0.8 contain a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes. This vulnerability, CVE-2026-47143, occurs in builds compiled with -DCAPSTONE_X86_REDUCE and could lead to a denial of service.
The CImg Library, a C++ image processing library, has a vulnerability in versions prior to 4.0.0, identified as CVE-2026-47667. The _load_analyze() function improperly handles the header_size field when reading Analyze/NIfTI files, potentially leading to memory allocation issues and denial of service.