Threats affecting pkg:github/gnuaspell/aspell

GNU Aspell version 0.60.8.2 contains a heap-based buffer overflow vulnerability in its read-only dictionary loader. The flaw arises from improper handling of size fields in a .rws dictionary header, allowing crafted dictionary files to trigger out-of-bounds writes. This can lead to heap memory corruption, causing denial of service or potentially arbitrary code execution. The issue is fixed in a commit identified as b830b6e and will be addressed in release 0.60.8.3.