Beveiligingsadvies

CVE-2018-3846

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-04-16 15:00:00

Laatst bijgewerkt 2024-09-17 02:21:57

Toegewezen door talos

CVSS-score 8.8

Status PUBLISHED

Beschrijving

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗