Priority MEDIUM 64
CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_nnybble in fits_hdecompress.c.
nasa
Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9
Exploited now
nasa records in CISA KEVNo nasa vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Cfitsio · all components
Priority MEDIUM 64
CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 se…
TI-2019-15966 CVE-2019-1010060 · GHSA-3gpw-r459-56f2
Memory corruption in nasa CFITSIO
Priority MEDIUM 52
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow.
TI-2018-02819 CVE-2018-3849 · GHSA-qc33-hp9r-f794
Out-of-bounds write in Talos NASA CFITSIO
Priority MEDIUM 44
In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data.
TI-2018-02818 CVE-2018-3848 · GHSA-868x-9f95-m4c9
Out-of-bounds write in Talos NASA CFITSIO
Priority MEDIUM 44
In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data.
TI-2018-02816 CVE-2018-3846 · GHSA-cr48-5q9g-m667
Out-of-bounds write in Talos NASA CFITSIO
Priority MEDIUM 44
In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data.
TI-2018-02817 CVE-2018-3847 · GHSA-962f-cm8q-5q3r
Out-of-bounds write in nasa CFITSIO
Priority MEDIUM 43
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42.