CVE-2019-25051

Related Vulnerabilities: CVE-2019-25051  

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).

Description

The MITRE CVE dictionary describes this issue as:

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).

Additional Information

  • Bugzilla 1984066: CVE-2019-25051 aspell: Heap-buffer-overflow in acommon::ObjStack::dup_top
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
  • FAQ: Frequently asked questions about CVE-2019-25051