Affected: Alpaquita:23: aspell, Alpaquita:25: aspell, Alpaquita:stream: aspell

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service.

This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service.

This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.

Affected: Ubuntu:Pro:14.04:LTS: aspell, Ubuntu:Pro:16.04:LTS: aspell, Ubuntu:18.04:LTS: aspell, Ubuntu:20.04:LTS: aspell, Ubuntu:22.04:LTS: aspell, Ubuntu:24.04:LTS: aspell, Ubuntu:26.04:LTS: aspell

(GNU Aspell contains an integer truncation vulnerability in the Writabl ...)