CVE-2026-75819

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3

Description An out-of-bounds read exists in the ReadOnlyDict::load() function within readonly ws.cpp. The issue occurs when loading a binary .rws dictionary file, as the software uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. A remote actor can exploit this by inducing a user to run the application with a specially crafted dictionary file provided via the --master or --dict-dir flags, or through configuration options. This can result in the disclosure of heap memory or a denial of service caused by an application crash.

Recommendations Update to version 0.60.8.3.