CVE-2025-47815

Name of the Vulnerable Software and Affected Versions GNU PSPP versions 2.0.1 and earlier

Description The issue allows attackers to cause a heap-based buffer overflow in the inflate read function, which is called indirectly from zip member read all in zip-reader.c. This can be exploited to cause undefined behavior, potentially leading to code execution.

Recommendations For GNU PSPP versions 2.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.