Heap-Based Buffer Overflow in GNU Aspell by GNU

CVE-2019-25051

What is CVE-2019-25051?

The vulnerability in GNU Aspell versions prior to 0.60.8 involves a heap-based buffer overflow in the objstack component. Specifically, this issue arises during operations in the acommon namespace, such as duplication of the top object in the stack via the dup_top function. This flaw can potentially allow an attacker to exploit the buffer overflow, leading to unexpected behaviors or application crashes, thereby jeopardizing the stability and security of the software.

References