CVE-2025-47229

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

Vendor	Product	Versions
GNU	PSPP	<= 2.0.1

References

https://savannah.gnu.org/bugs/?67049Exploit, Issue Tracking

Timeline

Published: May 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-47239.8A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unkno CVE-2025-47249.8A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is CVE-2025-472414.0In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority CVE-2025-472447.3Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by c CVE-2025-472458.1In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.CVE-2025-47259.8A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part o CVE-2025-472565.6Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in CVE-2025-47269.8A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknow CVE-2025-472686.5ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply pa CVE-2025-472698.3code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy CVE-2025-47273.7A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file pac CVE-2025-472707.5nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The `nimiq