CVE-2026-75820: CWE-190 Integer Overflow or Wraparound in GNU Aspell
Description
GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap corruption. An attacker can exploit this by convincing a user to run aspell with a crafted personal wordlist containing such a word, resulting in denial of service. This issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d which will be released in version 0.60.8.3.
CVSS v4.0
Score 1.8low
Affected software
GNU
Aspell
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-75820 is an integer truncation vulnerability in GNU Aspell's WritableDict::add() function located in modules/speller/default/writable.cpp. The vulnerability arises because the word length is stored as a single byte when loading a personal wordlist, causing truncation for words with lengths that are multiples of 256. This truncation results in heap corruption, which can be exploited by an attacker to cause a denial of service by convincing a user to run aspell with a maliciously crafted personal wordlist. The issue was fixed in commit 782ce94e4dc71eaec4ee1bd945eb3b9c47c5387d and will be released in version 0.60.8.3.
Potential Impact
The vulnerability can lead to heap corruption and denial of service when a user runs GNU Aspell with a crafted personal wordlist containing words whose length is a multiple of 256. There is no indication of privilege escalation or remote code execution. Exploitation requires user interaction and local access to run aspell with the malicious wordlist.
Mitigation Recommendations
A fix is available in GNU Aspell version 0.60.8.3, which addresses this integer truncation vulnerability. Users should upgrade to version 0.60.8.3 or later to remediate this issue. Until then, avoid loading personal wordlists containing words with lengths that are multiples of 256.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CERT-PL
- Date Reserved
- 2026-08-18T10:13:29.246Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac4d5ae2cdf04f6569deab2
Added to database: 10/06/2026, 11:04:14 UTC
Last enriched: 10/06/2026, 11:18:13 UTC
Last updated: 10/06/2026, 13:19:15 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.