CVE-2025-5898

Summary

A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected Software

VendorProductVersion RangeStatus
GNUPSPP82fb509fb2fedd33e7ac0c46ca99e108bb3bdffbaffected

Weaknesses

  • CWE-787: Out-of-bounds Write
  • CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References