CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_nnybble in fits_hdecompress.c. Attackers can supply a crafted FITS file with ZCMPTYPE HCOMPRESS_1 declaring oversized tile geometry to crash applications calling fits_read_pix or disclose limited heap memory.
References
Configurations
History
20 Oct 2026, 15:38
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nasa
Nasa cfitsio |
|
| References | () https://github.com/HEASARC/cfitsio - Product | |
| References | () https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/fits_hdecompress.c#L2575-L2633 - Product | |
| References | () https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/imcompress.c#L6310-L6316 - Product | |
| References | () https://hackmd.io/@haind-pwn/cfitsio-zdither0-dither-seed-oob-read - Exploit, Mitigation, Third Party Advisory | |
| References | () https://www.vulncheck.com/advisories/cfitsio-through-4.7.0-heap-out-of-bounds-read-via-hcompress-input-nnybble - Third Party Advisory | |
| CPE | cpe:2.3:a:nasa:cfitsio:*:*:*:*:*:*:*:* |
15 Oct 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-15 19:17
Updated : 2026-10-21 02:17
NVD link : CVE-2026-111125
Mitre link : CVE-2026-111125
CVE.ORG link : CVE-2026-111125
JSON object : View
Products Affected
nasa
- cfitsio
CWE
CWE-125
Out-of-bounds Read