A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function
parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write.
This vulnerability is traded as CVE-2025-5898. The attack needs to be approached locally. Furthermore, there is an exploit available.
