Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-14246 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document. |
| Link | Providers |
|---|---|
| https://savannah.gnu.org/bugs/?67073 |
|
Mon, 16 Jun 2025 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnu
Gnu pspp |
|
| CPEs | cpe:2.3:a:gnu:pspp:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Gnu
Gnu pspp |
Mon, 12 May 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Sat, 10 May 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document. | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-05-12T19:01:03.486Z
Reserved: 2025-05-10T00:00:00.000Z
Link: CVE-2025-47816
Updated: 2025-05-12T19:00:57.630Z
Status : Analyzed
Published: 2025-05-10T22:15:20.507
Modified: 2025-06-16T18:36:10.487
Link: CVE-2025-47816
No data.
OpenCVE Enrichment
No data.
EUVD