CVE-2026-75820

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3

Description An integer truncation issue exists in the WritableDict::add() function within the modules/speller/default/writable.cpp file. When loading a personal wordlist, the software stores the word length as a single byte, which causes truncation for words with lengths that are multiples of 256. This behavior leads to heap corruption, allowing an attacker to cause a denial of service by convincing a user to process a specially crafted personal wordlist.

Recommendations Update to version 0.60.8.3.