https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:17:50.910812+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-75819 BELL-CVE-2026-75819 2026-10-08T22:17:50.916931+00:00

Affected: Alpaquita:23: aspell, Alpaquita:25: aspell, Alpaquita:stream: aspell

 https://cve.radiocsirt.org/vuln/euvd-2026-383490 EUVD-2026-383490 2026-10-08T22:17:50.917006+00:00 EUVD-2026-383490 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75819 fkie_cve-2026-75819 2026-10-08T22:17:50.917055+00:00

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a user to run aspell with a crafted dictionary file supplied through --master, --dict-dir, or configuration options, leading to heap memory disclosure or a denial of service via application crash.

This issue was fixed in commit 941953b25031bc9104e83f58e138a664b8dedc3f which will be released in version 0.60.8.3.

 https://cve.radiocsirt.org/vuln/ghsa-5c9p-3r63-49hf GHSA-5c9p-3r63-49hf 2026-10-08T22:17:50.917088+00:00

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a user to run aspell with a crafted dictionary file supplied through --master, --dict-dir, or configuration options, leading to heap memory disclosure or a denial of service via application crash.

This issue was fixed in commit 941953b25031bc9104e83f58e138a664b8dedc3f which will be released in version 0.60.8.3.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-75819 msrc_CVE-2026-75819 — Out-of-bounds Read in GNU Aspell 2026-10-08T22:17:50.917107+00:00 msrc_CVE-2026-75819 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-75819 UBUNTU-CVE-2026-75819 2026-10-08T22:17:50.917124+00:00

Affected: Ubuntu:Pro:14.04:LTS: aspell, Ubuntu:Pro:16.04:LTS: aspell, Ubuntu:18.04:LTS: aspell, Ubuntu:20.04:LTS: aspell, Ubuntu:22.04:LTS: aspell, Ubuntu:24.04:LTS: aspell, Ubuntu:26.04:LTS: aspell

(GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDic ...)