Heap-based Buffer Overflow in GNU PSPP Affects Multiple Versions

CVE-2025-47814

What is CVE-2025-47814?

A heap-based buffer overflow vulnerability exists in the GNU PSPP software's libpspp-core.a library. This flaw can be exploited during the process of reading an XML member from a ZIP file, specifically through the inflate_read function called from zip-reader.c. Successful exploitation could allow attackers to overwrite memory, potentially leading to arbitrary code execution or denial of service.

References