rpm package
almalinux/aspell
pkg:rpm/almalinux/aspell
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-103658 | Med | 5.9 | < 12:0.60.8-9.el9_8 | 12:0.60.8-9.el9_8 | Oct 12, 2026 | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFF | |
| CVE-2019-25051 | Hig | 7.8 | < 12:0.60.6.1-22.el8 | 12:0.60.6.1-22.el8 | Jul 20, 2021 | objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). |
- affected < 12:0.60.8-9.el9_8fixed 12:0.60.8-9.el9_8
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFF
- affected < 12:0.60.6.1-22.el8fixed 12:0.60.6.1-22.el8
objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).