gnu aspell

Name: gnu aspell
Brand: gnu

productUS

cpe:2.3:a:gnu:aspell:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical2high0medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-0548US	high7.2	0.92% (60th)	Exploit	no fix	2004-08-06	= 0.50.5
CVE-2019-17544US	critical9.1	3.26% (88th)	—	0.60.8	2019-10-14	< 0.60.8
CVE-2019-20433US	critical9.1	1.74% (78th)	—	0.60.8	2020-01-27	< 0.60.8
CVE-2019-25051US	high7.8	0.55% (46th)	—	no fix	2021-07-20	= 0.60.8

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-416Use After Free1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.