GNU Aspell versions prior to 0.60.8.1-2.oe2403sp3 contain multiple heap-based buffer overflow and out-of-bounds read vulnerabilities in their dictionary loading and decompression components. These flaws allow attackers to cause heap memory corruption, denial of service, and potentially code execution by tricking users into loading malicious dictionary or compressed files. The issues are fixed in version 0.60.8.1-2.oe2403sp3 and later.