EUVD Vulnerability Catalog

EUVD-2026-93365

Severity: LOW Base Score: 1.8 CVSS Version: 4.0

Vulnerability Description

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a user to run aspell with a crafted dictionary file supplied through --master, --dict-dir, or configuration options, leading to heap memory disclosure or a denial of service via application crash. This issue was fixed in commit 941953b25031bc9104e83f58e138a664b8dedc3f which will be released in version 0.60.8.3.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:L/SI:N/SA:N

▪ Attack Vector (AV): Local

▪ Attack Complexity (AC): High

▪ Attack Requirements (AT): None

▪ Privileges Required (PR): None

▪ User Interaction (UI): Active

▪ Vulnerability Confidentiality Impact (VC): None

▪ Vulnerability Integrity Impact (VI): None

▪ Vulnerability Availability Impact (VA): Low

▪ Subsequent Confidentiality Impact (SC): Low

▪ Subsequent Integrity Impact (SI): None

▪ Subsequent Availability Impact (SA): None

Affected Vendors & Systems

Vendor GNU

References & Advisory Links

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

CERT-PL

EPSS Probability

Known Aliases

CVE-2026-75819

Published On

2026-10-06

Last Updated

2026-10-06