CVE-2025-5899

Name of the Vulnerable Software and Affected Versions GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb

Description A critical issue was found in the parse variables option function of the file utilities/pspp-convert.c. This issue leads to the freeing of memory not on the heap. An attack must be launched locally. The exploit has been publicly disclosed.

Recommendations For GNU PSPP version 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb, as a temporary workaround, consider disabling the parse variables option function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.