CVE-2026-75818
published 2026-10-06CVE-2026-75818: GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer…
PriorityP415low1.8CVSS 4.0
AVLACHATNPRNUIAVCNVINVALSCLSILSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.14%
2.9th percentile
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to process a malicious compressed file with prezip-bin can trigger memory corruption, leading to a processs crash.
This issue was fixed in commit 15b188437f9e0192d4ac4472ad66a4e2f62a782f which will be released in version 0.60.8.3.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | aspell | < 0.60.8.3 | 0.60.8.3 |
| gnu | aspell | — | — |
CVSS provenance
nvdv4.01.8LOWCVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat1.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
vendor_redhat·2026-10-06·CVSS 1.8
CVE-2026-75818 [LOW] CWE-787 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
A flaw was found in GNU Aspell's prezip-bin utility. The decompression component does not properly validate buffer space when decompressing input files. An attacker could convince a user to process a specially crafted compressed file, triggering out-of-bounds memory operations that cause memory corruption and a Denial of Service (DoS) through an application crash.
Statement: This vulnerability is rated as Low impact for Red Hat products because successful exploitation requires local user interaction to process an untrusted file and is limited to causing an application crash. The prezip-bin utility is a short-lived command-line tool rather than a network daemon or persistent service. Under typical deployments, thi
GHSA
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c.
ghsa_unreviewed·2026-10-06
CVE-2026-75818 [LOW] CWE-122 GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c.
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to process a malicious compressed file with prezip-bin can trigger memory corruption, leading to a processs crash.
This issue was fixed in commit 15b188437f9e0192d4ac4472ad66a4e2f62a782f which will be released in version 0.60.8.3.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin [fedora-all]
bugzilla·2026-10-06·CVSS 1.8
CVE-2026-75818 [LOW] CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin [fedora-all]
CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to process a malicious compressed file with prezip-bin can trigger memory corruption, leading to a processs crash.
This issue was fixed in commit 15b188437f9e0192d4ac4472ad66a4
Bugzilla
CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
bugzilla·2026-10-06·CVSS 1.8
CVE-2026-75818 [LOW] CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
CVE-2026-75818 aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to process a malicious compressed file with prezip-bin can trigger memory corruption, leading to a processs crash.
This issue was fixed in commit 15b188437f9e0192d4ac4472ad66a4e2f62a782f which will be released in version 0.60.8.3.
2026-10-06
Published