Skip to content
OpenAdvisories

Package · Azure Linux

cfitsio

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c

    CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-by…