4.8
Medium
CVE-2025-5899 A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
Description
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PSPP | Versions not published |
References
- VDB-311671 | GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap vuldb.com
- VDB-311671 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #586106 | GNU libpspp pspp-convert master in Git Repository[commit:82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb] Denial of Service vuldb.com
- savannah.gnu.org savannah.gnu.org
- drive.google.com drive.google.com
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of PSPP
The 8 CVEs of PSPP →
CVE-2025-5898
A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Medium
CVE-2025-5001
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Medium
CVE-2025-48188
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib…
2.9
Low
CVE-2025-47814
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read…
4.5
Medium