CVE-2025-5001

Summary

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected Software

VendorProductVersion RangeStatus
GNUPSPP82fb509fb2fedd33e7ac0c46ca99e108bb3bdffbaffected

Weaknesses

  • CWE-190: Integer Overflow
  • CWE-189: Numeric Error

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References