CVE-2019-17544

CRITICAL 9.1CVE-2019-17544 · Published 14/10/2019 · updated 17/06/2026

In short

CVE-2019-17544 is a CRITICAL (CVSS 9.1) vulnerability affecting aspell (gnu).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.4% of all vulnerabilities.
Fix: update to 0.60.8 or later.

Package	Affected versions	Patched versions
aspell gnu	`< 0.60.8`	`0.60.8`

libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.