Cpe:2.3:a:nasa:cfitsio:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3anasacfitsio/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 22:31:05 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNASA CFITSIO: Out-of-bounds write in getcols.c (CVE-2026-115504)https://feed.craftedsignal.io/briefs/2026-10-cfitsio-oob-write/Thu, 22 Oct 2026 22:31:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cfitsio-oob-write/A vulnerability in CFITSIO up to version 4.7.0 allows for arbitrary code execution through an out-of-bounds write in the ffgcls2 function when processing maliciously crafted FITS files.CFITSIO version 4.7.0 and earlier contains an out-of-bounds write vulnerability in the ffgcls2() function located in getcols.c. The vulnerability arises because the library trusts attacker-controlled heap descriptor lengths for variable-length string columns. A crafted FITS file can trigger an overflow of a fixed 28,800-byte stack buffer, potentially leading to arbitrary code execution in the context of the application parsing the file.

Impact

Successful exploitation allows an attacker to achieve arbitrary code execution on systems that process malicious FITS files using the affected CFITSIO library.

Recommendation

  • Inventory systems and software applications within the environment that utilize the CFITSIO library for FITS file processing.
  • Prioritize updates to the latest version of CFITSIO once the vendor releases a patch addressing CVE-2026-115504.
  • Implement file format validation or utilize sandboxing when processing untrusted FITS files until the library can be updated.
]]>highadvisoryvulnerabilityrcefile-processing