CVE-2026-75818

A flaw was found in GNU Aspell's prezip-bin utility. The decompression component does not properly validate buffer space when decompressing input files. An attacker could convince a user to process a specially crafted compressed file, triggering out-of-bounds memory operations that cause memory corruption and a Denial of Service (DoS) through an application crash.

This vulnerability is rated as Low impact for Red Hat products because successful exploitation requires local user interaction to process an untrusted file and is limited to causing an application crash. The prezip-bin utility is a short-lived command-line tool rather than a network daemon or persistent service. Under typical deployments, this tool is rarely invoked directly on untrusted inputs, preventing remote exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.