CVE Tools
Track your stack

Aspell

8 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Aspell, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Aspell CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Aspell CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-104

Severity

How the 8 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical240%
  • High240%
  • Medium120%

Latest CVEs

The 8 most recently published vulnerabilities affecting Aspell.

  1. CVE-2026-103658GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes...5.9
  2. CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU Aspell—
  3. CVE-2026-75819Out-of-bounds Read in GNU Aspell—
  4. CVE-2026-75818Heap Buffer Overflow in GNU Aspell's prezip utility—
  5. CVE-2019-25051objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).7.8
  6. CVE-2019-20433libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by t...9.1
  7. CVE-2019-17544libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.9.1
  8. CVE-2004-0548Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not prope...7.2

Product grouping is registry-driven, with AI assist and human review. How it works