GNU PSPP

• CVE-2025-5899 Medium 5.3 GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap 0.2%
• CVE-2025-5898 Medium 5.3 GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write 0.2%
• CVE-2025-5001 Low 3.3 GNU PSPP pspp-convert.c calloc integer overflow 0.3%
• CVE-2025-48188 Low 2.9 libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read. 0.2%
• CVE-2025-47815 Medium 4.5 libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c. 0.3%
• CVE-2025-47814 Medium 4.5 libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c. 0.3%
• CVE-2025-47816 Low 2.9 libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document. 0.4%
• CVE-2025-47229 Low 2.9 libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a 0.2%