CVE-2025-5001 – GNU PSPP calloc Integer Overflow Vulnerability

CVE ID : CVE-2025-5001

Published : May 20, 2025, 10:15 p.m. | 55 minutes ago

Description : A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Severity: 3.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…