GNU Aspell versions prior to 0.60.8.1-2.oe2403sp4 contain multiple heap-based buffer overflow and out-of-bounds read vulnerabilities in their dictionary loading and decompression components. These flaws allow an attacker to cause heap memory corruption, denial of service, memory disclosure, and potentially remote code execution by tricking a user into loading crafted dictionary or compressed files. The issues are fixed in version 0.60.8.1-2.oe2403sp4 and later.