CVE-2026-75819

UNKNOWN 0.0

Out-of-bounds Read in GNU Aspell

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a user to run aspell with a crafted dictionary file supplied through --master, --dict-dir, or configuration options, leading to heap memory disclosure or a denial of service via application crash. This issue was fixed in commit 941953b25031bc9104e83f58e138a664b8dedc3f which will be released in version 0.60.8.3.

CWE	CWE-125
Vendor	gnu
Product	aspell
Published	Oct 6, 2026

Stay Ahead of the Next One

Get instant alerts for gnu aspell

Be the first to know when new unknown vulnerabilities affecting gnu aspell are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

GNU / Aspell

0 < 0.60.8.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cert.pl: https://cert.pl/en/posts/2026/10/CVE-2026-75818 aspell.net: http://aspell.net/

Credits

Michał Majchrowicz (AFINE Team) Marcin Wyczechowski (AFINE Team)