Security Advisory
CVE-2018-3846
8.8
HIGH
Vulnerability Description
In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Published Date
April 16, 2018
Official Source
NIST NVD Advisory