1.8
Low
CVE-2026-75820 GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in…
Description
GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service. This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspell 0.60 | earliest → < 0.60.8.3 | 0.60.8.3 |
Other CVEs of Aspell
The 4 CVEs of Aspell →
CVE-2026-103658
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its…
5.9
Medium
CVE-2026-75819
GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp
1.8
Low
CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c
1.8
Low