Pspp

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of servic…CVE-2019-9211Gnu · 2.0% likely

   CWE-617

2. There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting t…CVE-2017-10791Gnu · 1.6% likely

   CWE-190

3. There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when at…CVE-2017-10792Gnu · 1.6% likely

   CWE-476

4. There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.CVE-2017-12961Gnu · 1.3% likely

   CWE-20

5. There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of serv…CVE-2017-12960Gnu · 1.3% likely

   CWE-617

6. There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of ser…CVE-2017-12959Gnu · 1.3% likely

   CWE-617

7. There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.CVE-2017-12958Gnu · 1.3% likely

   CWE-125

8. An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a de…CVE-2018-20230Gnu · 0.8% likely

   CWE-787

9. An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a de…CVE-2022-39831Gnu · 0.5% likely

   CWE-787

10. An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of…CVE-2022-39832Gnu · 0.5% likely

    CWE-787

11. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a documen…CVE-2025-47816GNU · CVSS 2.9 · 0.4% likely

    CWE-125

12. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.CVE-2025-47815GNU · CVSS 4.5 · 0.3% likely

    CWE-122

13. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c.CVE-2025-47814GNU · CVSS 4.5 · 0.3% likely

    CWE-122

14. GNU PSPP pspp-convert.c calloc integer overflowCVE-2025-5001GNU · CVSS 3.3 · 0.3% likely

    CWE-190

15. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as…CVE-2025-47229GNU · CVSS 2.9 · 0.2% likely

    CWE-617

16. GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapCVE-2025-5899GNU · CVSS 5.3 · 0.2% likely

    CWE-590

17. GNU PSPP pspp-convert.c parse_variables_option out-of-bounds writeCVE-2025-5898GNU · CVSS 5.3 · 0.2% likely

    CWE-787

18. libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer o…CVE-2025-48188GNU · CVSS 2.9 · 0.2% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.