CVE-2026-115504
CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
HEASARC cfitsio
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string array, enabling arbitrary code execution.
Text from CVE List
Affected versions 1
- cfitsioaffected: all versions through 4.7.0CVE List
References 5
- github.com/HEASARC/cfitsio/pull/184Fixvia CVE List
- github.com/HEASARC/cfitsio/commit/579792e0f85bff0c6733ad5ebdf54c3b5c188686Fixvia CVE List
- vulncheck.com/advisories/cfitsio-through-4.7.0-out-of-bounds-write-via-ffgcls2-in-getcols-cAdvisoryvia CVE List
- gist.github.com/yure1432/98f15c7e8f48dc90ae65646f926aa176Exploitvia CVE List
- github.com/HEASARC/cfitsioReferencevia CVE List