CVE-2021-39537: Buffer Overflow

Reference Links

• https://support.apple.com/en-us/HT213443 (Advisory)
• https://support.apple.com/en-us/HT213444 (Advisory)
• https://support.apple.com/en-us/HT213488 (Advisory)
• https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html
• https://lists.gnu.org/archive/html/bug-ncurses/2021-10/msg00023.html
• http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup
• https://support.apple.com/kb/HT213443
• https://support.apple.com/kb/HT213444
• https://support.apple.com/kb/HT213488
• http://seclists.org/fulldisclosure/2022/Oct/41
• http://seclists.org/fulldisclosure/2022/Oct/28
• http://seclists.org/fulldisclosure/2022/Oct/43
• http://seclists.org/fulldisclosure/2022/Oct/45
• https://security.netapp.com/advisory/ntap-20230427-0012/
• https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html

Parent vulnerabilities

(Appears in the following advisories)

• HT213443
• HT213444
• HT213488

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-42789
• CVE-2022-32904
• CVE-2022-32902
• CVE-2022-42819
• CVE-2022-32854
• CVE-2022-32877
• CVE-2022-1622
• CVE-2022-32913
• CVE-2022-32896
• CVE-2022-46701
• CVE-2022-32914
• CVE-2022-32866
• CVE-2022-32911
• CVE-2022-32924
• CVE-2022-32864
• CVE-2022-32894
• CVE-2022-32917
• CVE-2022-32883
• CVE-2022-32908
• CVE-2021-39537
• CVE-2022-32900
• CVE-2022-32881
• CVE-2022-42793
• CVE-2022-42790
• CVE-2022-32934
• CVE-2022-1720
• CVE-2022-2000
• CVE-2022-2042
• CVE-2022-2124
• CVE-2022-2125
• CVE-2022-2126
• CVE-2022-32875
• CVE-2022-32888
• CVE-2022-42818
• CVE-2022-0261
• CVE-2022-0318
• CVE-2022-0319
• CVE-2022-0351
• CVE-2022-0359
• CVE-2022-0361
• CVE-2022-0368
• CVE-2022-0392
• CVE-2022-42795
• CVE-2022-48577
• CVE-2022-32858
• CVE-2022-32898
• CVE-2022-32899
• CVE-2022-46721
• CVE-2022-47915
• CVE-2022-47965
• CVE-2022-32889
• CVE-2022-32907
• CVE-2022-32827
• CVE-2022-42825
• CVE-2022-46722
• CVE-2022-32890
• CVE-2022-42796
• CVE-2022-42798
• CVE-2022-32940
• CVE-2022-42816
• CVE-2022-42821
• CVE-2022-42860
• CVE-2022-42813
• CVE-2022-26730
• CVE-2022-32945
• CVE-2022-42838
• CVE-2022-22663
• CVE-2022-32867
• CVE-2022-32205
• CVE-2022-32206
• CVE-2022-32207
• CVE-2022-32208
• CVE-2022-42814
• CVE-2022-32865
• CVE-2022-32915
• CVE-2022-32928
• CVE-2022-22643
• CVE-2022-32935
• CVE-2022-42788
• CVE-2022-48504
• CVE-2022-32905
• CVE-2022-42833
• CVE-2022-32947
• CVE-2022-42809
• CVE-2022-3437
• CVE-2022-32849
• CVE-2022-32809
• CVE-2022-32936
• CVE-2022-42820
• CVE-2022-42806
• CVE-2022-42808
• CVE-2022-32944
• CVE-2022-42803
• CVE-2022-32926
• CVE-2022-42801
• CVE-2022-46712
• CVE-2022-42815
• CVE-2022-42834
• CVE-2022-46707
• CVE-2022-42810
• CVE-2022-29458
• CVE-2022-32879
• CVE-2022-32895
• CVE-2022-46713
• CVE-2022-42807
• CVE-2022-32918
• CVE-2022-42829
• CVE-2022-42830
• CVE-2022-42831
• CVE-2022-42832
• CVE-2022-32941
• CVE-2022-28739
• CVE-2022-32862
• CVE-2022-32931
• CVE-2022-42811
• CVE-2022-32876
• CVE-2022-32938
• CVE-2022-32870
• CVE-2022-42791
• CVE-2021-36690
• CVE-2022-48505
• CVE-2022-26699
• CVE-2022-0554
• CVE-2022-0572
• CVE-2022-0629
• CVE-2022-0685
• CVE-2022-0696
• CVE-2022-0714
• CVE-2022-0729
• CVE-2022-0943
• CVE-2022-1381
• CVE-2022-1420
• CVE-2022-1725
• CVE-2022-1616
• CVE-2022-1619
• CVE-2022-1620
• CVE-2022-1621
• CVE-2022-1629
• CVE-2022-1674
• CVE-2022-1733
• CVE-2022-1735
• CVE-2022-1769
• CVE-2022-1927
• CVE-2022-1942
• CVE-2022-1968
• CVE-2022-1851
• CVE-2022-1897
• CVE-2022-1898
• CVE-2022-42828
• CVE-2022-42826
• CVE-2022-32886
• CVE-2022-32912
• CVE-2022-42799
• CVE-2022-42823
• CVE-2022-42824
• CVE-2022-32923
• CVE-2022-32922
• CVE-2022-32892
• CVE-2022-32833
• CVE-2022-46709
• CVE-2022-37434
• CVE-2022-42800

Frequently Asked Questions

• What is CVE-2021-39537?

  CVE-2021-39537 is a vulnerability in ncurses that was addressed with improved bounds checking.

• How severe is CVE-2021-39537?

  The severity of CVE-2021-39537 is not specified in the provided information.

• Which software is affected by CVE-2021-39537?

  CVE-2021-39537 affects macOS Big Sur (11.7), macOS Monterey (12.6), and macOS Ventura (up to exclusive version 13).

• How can I fix CVE-2021-39537?

  To fix CVE-2021-39537, update your macOS to the corresponding remedied versions: macOS Big Sur 11.7, macOS Monterey 12.6, or macOS Ventura (version 13 or later if available).

• Where can I find more information about CVE-2021-39537?

  You can find more information about CVE-2021-39537 at the following references: [Apple support article 1](https://support.apple.com/en-us/HT213443), [Apple support article 2](https://support.apple.com/en-us/HT213444), and [Apple support article 3](https://support.apple.com/en-us/HT213488).