CVE-2025-48188
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.
Vendor
Product
CWE
Yayın Tarihi
2025-05-16 21:15:35
Güncelleme
2025-07-17 20:33:11
Source Identifier
cve@mitre.org
KEV Date Added
-