Product by GNU
GNU PSPP
18 known vulnerabilities in GNU PSPP (GNU), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Medium | CVE-2019-9211 | GNU PSPP: Denial of Service | 6.5 | |
| Medium | CVE-2017-10791 | GNU PSPP: Integer Overflow | 6.5 | |
| Medium | CVE-2017-10792 | GNU PSPP: NULL Pointer Dereference | 6.5 | |
| High | CVE-2017-12958 | GNU PSPP: Denial of Service | 7.5 | |
| High | CVE-2017-12960 | GNU PSPP: Denial of Service | 7.5 | |
| High | CVE-2017-12961 | GNU PSPP: Denial of Service | 7.5 | |
| High | CVE-2017-12959 | GNU PSPP: Denial of Service | 7.5 | |
| High | CVE-2018-20230 | GNU PSPP: Heap-Based Buffer Overflow | 7.8 | |
| High | CVE-2022-39831 | GNU PSPP: Heap-Based Buffer Overflow | 7.8 | |
| High | CVE-2022-39832 | GNU PSPP: Heap-Based Buffer Overflow | 7.8 | |
| Medium | CVE-2025-5001 | GNU PSPP pspp-convert.c calloc integer overflow | 3.3 | |
| Medium | CVE-2025-5899 | GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap | 5.3 | |
| Medium | CVE-2025-5898 | GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write | 5.3 | |
| Critical | CVE-2025-47814 | GNU PSPP: Heap-based Buffer Overflow | 4.5 | |
| Critical | CVE-2025-47815 | GNU PSPP: Heap-based Buffer Overflow | 4.5 | |
| Critical | CVE-2025-47816 | GNU PSPP: Out-of-bounds Read | 2.9 | |
| Medium | CVE-2025-48188 | GNU PSPP: Out-of-bounds Read | 2.9 | |
| Medium | CVE-2025-47229 | GNU PSPP: Reachable Assertion | 2.9 |