GNU PSPP vulnerabilities

Newest CVEs

• CVE-2025-5899

  GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap

  GNU · PSPP

  Medium4.8
• CVE-2025-5898

  GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write

  GNU · PSPP

  Medium4.8
• CVE-2025-5001

  GNU PSPP pspp-convert.c calloc integer overflow

  GNU · PSPP

  Medium4.8
• CVE-2025-48188

  libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a…

  GNU · PSPP

  Low2.9
• CVE-2025-47816

  libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at…

  GNU · PSPP

  Low2.9
• CVE-2025-47815

  libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in…

  GNU · PSPP

  Medium4.5
• CVE-2025-47814

  libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in…

  GNU · PSPP

  Medium4.5
• CVE-2025-47229

  libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted…

  GNU · PSPP

  Low2.9