Unrated severityNVD Advisory· Published May 20, 2025· Updated May 21, 2025

GNU PSPP pspp-convert.c calloc integer overflow

CVE-2025-5001

Description

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Psppllm-fuzzy2 versions
= 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb+ 1 more
- (no CPE)range: = 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
- (no CPE)range: 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb

Patches

Vulnerability mechanics

References

drive.google.com/file/d/12IIt8eR591Z8O1ABOCkT_jdXSWaBxMZx/viewmitreexploit
vuldb.commitrethird-party-advisory
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.gnu.orgmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000