Skip to content
OpenAdvisories

Package · Ubuntu

cfitsio

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-111125

    CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble

    CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_nnybble in fits_hdecompress.c. Attackers can supply a crafted FITS file with ZCM…

    HEASARC cfitsio cfitsio cfitsio Debian Ubuntu
  • Medium 6.1
    CVE-2026-111124

    CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed

    CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 seed. Attackers can supply a crafted FITS…

    HEASARC cfitsio cfitsio cfitsio Debian Ubuntu