Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GNU Aspell 0.60.8.3 Clear all filters
TI-2026-68408 CVE-2026-75820 · GHSA-7gjr-5wh9-g7w9

Integer truncation leads to heap corruption in GNU Aspell

Priority LOW 9

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00132 Published 2026-10-06 Partial fix · 0.60.8.3 CWE-190
TI-2026-68407 CVE-2026-75819 · GHSA-5c9p-3r63-49hf

Out-of-bounds read in GNU Aspell dictionary loading

Priority LOW 9

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00125 Published 2026-10-06 Partial fix · 0.60.8.3 CWE-125
TI-2026-68406 CVE-2026-75818 · GHSA-93mw-x5wh-jf8f

Heap buffer overflow in GNU Aspell prezip-bin decompressor

Priority LOW 9

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00146 Published 2026-10-06 Partial fix · 0.60.8.3 CWE-122