rpm package
opensuse/aspell&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/aspell&distro=openSUSE%20Tumbleweed
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-75820 | Low | — | < 0.60.8.2-2.1 | 0.60.8.2-2.1 | Oct 6, 2026 | GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This | |
| CVE-2026-75819 | Low | — | < 0.60.8.2-2.1 | 0.60.8.2-2.1 | Oct 6, 2026 | GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger t | |
| CVE-2026-75818 | Low | — | < 0.60.8.2-2.1 | 0.60.8.2-2.1 | Oct 6, 2026 | GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convi | |
| CVE-2019-25051 | Hig | 7.8 | < 0.60.8-4.2 | 0.60.8-4.2 | Jul 20, 2021 | objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). |
- affected < 0.60.8.2-2.1fixed 0.60.8.2-2.1
GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This
- affected < 0.60.8.2-2.1fixed 0.60.8.2-2.1
GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger t
- affected < 0.60.8.2-2.1fixed 0.60.8.2-2.1
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convi
- affected < 0.60.8-4.2fixed 0.60.8-4.2
objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).