TI-2026-79486 CVE-2026-115504 · GHSA-wjcj-f49x-x56c
Out-of-bounds write in CFITSIO ffgcls2 allows code execution
Priority LOW 38
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns.