CVE-2025-47229

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1

2.9 LOWCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.17% chance of exploitation in the next 30 days, 7th percentile

Published

2025-05-03

Updated

2025-05-05

Proof-of-concept exploits (1)

• https://savannah.gnu.org/bugs/?67049

References

• CVE Record
• NVD entry

Related

• CVE-2025-47228
• CVE-2025-4723
• CVE-2025-47227
• CVE-2025-4724
• CVE-2025-47226
• CVE-2025-4725