Heap-based Buffer Overflow in PSPP by GNU
CVE-2022-39832
7.8HIGH
What is CVE-2022-39832?
A heap-based buffer overflow has been identified in version 1.6.2 of PSPP. This vulnerability occurs in the 'read_string' function located in the source file utilities/pspp-dump-sav.c. Exploiting this flaw may allow attackers to trigger an application crash, resulting in a denial of service, while potentially opening the door to additional yet unspecified impacts on the system's integrity.