CVE Feed

    Dashboard / CVE / CVE-2026-111124

    CVE-2026-111124

    CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 seed. Attackers can supply a crafted FITS file with a SUBTRACTIVE_DITHER_1 compressed image, read through fits_open_file() and fits_read_pix(), to cause crashes or leak heap contents in decoded pixels.

    Published:Oct 15, 2026
    Last Modified:Oct 26, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.00238
    CVSS Score:6.1

    Affected Products

    Vendor
    Nasa
    Product
    Cfitsio

    Exploits

    https://hackmd.io/@haind-pwn/cfitsio-zdither0-dither-seed-oob-readhttps://hackmd.io/@haind-pwn/cfitsio-zdither0-dither-seed-oob-read

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-111125 (CVSS 6.9) — CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder tha…
    CVE-2019-1010060 (CVSS 9.8) — NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The compo…
    CVE-2018-3847 (CVSS 8.8) — Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO libra…
    CVE-2018-3849 (CVSS 8.8) — In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack…
    CVE-2018-3846 (CVSS 8.8) — In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can c…
    CVE-2018-3848 (CVSS 8.8) — In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High