A vulnerability classified as problematic has been found in GNU PSPP up to 2.0.1. Affected is the function spvxml_parse_attributes of the file libpspp-core.a. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2025-47816. It is possible to launch the attack on the local host. There is no exploit available.