{"id":"CVE-2026-75819","revision":"e5e88ae5d5e54f99833fd30a3ef5b0c9","records":[{"revision":"e5e88ae5d5e54f99833fd30a3ef5b0c9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-75819","aliases":[],"title":"Out-of-bounds Read in GNU Aspell","description":"GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a user to run aspell with a crafted dictionary file supplied through --master, --dict-dir, or configuration options, leading to heap memory disclosure or a denial of service via application crash.\n\n\n\nThis issue was fixed in commit 941953b25031bc9104e83f58e138a664b8dedc3f\u00A0which will be\u00A0released in version\u00A00.60.8.3.","state":0,"publishedAt":"2026-10-06T10:57:56.333+00:00","modifiedAt":"2026-10-06T12:50:16.684+00:00","affected":[{"ecosystem":"Vendor product","name":"Aspell","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GNU\",\n                    \"product\": \"Aspell\",\n                    \"repo\": \"https://github.com/GNUAspell/aspell\",\n                    \"modules\": [\n                        \"ReadOnlyDict::load()\"\n                    ],\n                    \"programFiles\": [\n                        \"readonly_ws.cpp\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.60.8.3\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:L/SI:N/SA:N","score":1.8,"severity":"LOW"}],"references":["https://cert.pl/en/posts/2026/10/CVE-2026-75818","http://aspell.net/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-75819","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-75819","identifiers":["CVE-2026-75819"]},"retained":false,"historicalAffected":[]}],"coverage":[]}