CVE-2022-39831: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact. This issue is different from CVE-2018-20230.

Affected products

• Fedoraproject Fedora: version 36 only; version 37 only
• GNU Pspp: version 1.6.2 only

Published 2022-09-05. Last modified 2026-06-17.