CVE-2026-75818

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3

Description The prezip-bin utility contains a heap-based buffer overflow in the decompressor located in prog/prezip.c. The decompressor fails to properly validate buffer space, allowing a specially crafted compressed file to trigger out-of-bounds read and write operations on the heap. This memory corruption can lead to a process crash if a user is persuaded to process a malicious file.

Recommendations Update to version 0.60.8.3.