GNU Aspell

• CVE-2026-103658 Medium 5.9 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes it 0.2%
• CVE-2026-75820 Low 1.8 Integer Truncation Leading to Heap Corruption in GNU Aspell 0.1%
• CVE-2026-75819 Low 1.8 Out-of-bounds Read in GNU Aspell 0.1%
• CVE-2026-75818 Low 1.8 Heap Buffer Overflow in GNU Aspell's prezip utility 0.1%