CVE-2025-5898

Name of the Vulnerable Software and Affected Versions GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb

Description A critical issue has been discovered, affecting the parse variables option function in the utilities/pspp-convert.c file. This leads to an out-of-bounds write. The attack must be launched locally.

Recommendations For GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb, as a temporary workaround, consider disabling the parse variables option function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.