GNU Aspell versions prior to 0.60.6.1-31.oe2203sp4 contain multiple heap-based buffer overflow and out-of-bounds read vulnerabilities in their dictionary loading and decompression components. These flaws allow an attacker to cause heap memory corruption, denial of service, and potentially code execution by tricking a user into loading crafted dictionary or compressed files. The issues are fixed in version 0.60.6.1-31.oe2203sp4 and later.