CVE-2019-20433

Publication date

2020-01-27 14:03:26

Family

mitre

State

PUBLISHED

Description

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single 0 byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.