VULNERABILITY INTELLIGENCE

CVE-2025-48188

CVSS score5.5 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2025-05-16

Last modified2026-06-17

Description

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.