https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:07:00.818499+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-383491 EUVD-2026-383491 2026-10-07T17:07:00.821037+00:00 EUVD-2026-383491 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75820 fkie_cve-2026-75820 2026-10-07T17:07:00.821069+00:00

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service.

This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.

 https://cve.radiocsirt.org/vuln/ghsa-7gjr-5wh9-g7w9 GHSA-7gjr-5wh9-g7w9 2026-10-07T17:07:00.821106+00:00

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service.

This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-75820 msrc_CVE-2026-75820 — Integer Truncation Leading to Heap Corruption in GNU Aspell 2026-10-07T17:07:00.821127+00:00 msrc_CVE-2026-75820