GNU Aspell versions prior to 0.60.8.1-2.oe2403sp1 contain multiple heap-based buffer overflow and out-of-bounds read vulnerabilities in their dictionary loading and decompression components. These flaws allow an attacker to craft malicious dictionary or compressed files that, when loaded or processed by Aspell, can cause heap memory corruption, denial of service, or potentially code execution. The issues are fixed in version 0.60.8.1-2.oe2403sp1 and later.