libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document. Rated low severity (CVSS 2.9), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.
Buffer Overflow
Information Disclosure
Pspp
Gnu
NVD
CVSS 3.1
2.9
EPSS
0.2%