Nez

A critical issue was found in the `parse variables option` function of the file `utilities/pspp-convert.c`. This issue leads to the freeing of memory not on the heap. An attack must be launched locally. The exploit has been publicly disclosed.

A critical issue has been discovered, affecting the `parse variables option` function in the `utilities/pspp-convert.c` file. This leads to an out-of-bounds write. The attack must be launched locally.

A vulnerability was found in GNU PSPP, affecting the `calloc` function in the `pspp-convert.c` file. The manipulation of the argument `-l` leads to integer overflow. Local access is required to approach this attack.

libpspp-core.a in GNU PSPP through 2.0.1 contains an incorrect call from the `fill buffer` function (in data/encrypted-file.c) to the Gnulib `rijndaelDecrypt` function, resulting in a heap-based buffer over-read.

The issue allows attackers to cause an out-of-bounds read in `spvxml-helpers.c` `spvxml parse attributes`, related to extra content at the end of a document.

The issue allows attackers to cause a heap-based buffer overflow in the `inflate read` function, which is called indirectly from `zip member read all` in `zip-reader.c`. This can be exploited to cause undefined behavior, potentially leading to code execution.

The issue allows attackers to cause a heap-based buffer overflow in `inflate read` (called indirectly from `spv read xml member`) in `zip-reader.c`.

The issue allows attackers to cause a denial of service, resulting in an application exit, via crafted input data. This can be triggered by specific data that causes a call from the `src/data/dictionary.c` code into the `src/data/variable.c` code, leading to a `var set leave quiet` assertion failure.