CF
Product
CFITSIO
by NASA · last CVE Oct 15, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 6Medium 0Low 0
Watch

Add CFITSIO to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-1010060
9.8
7%
Jul 16
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow
Affected: before 3.43
CVE-2018-3847
8.8
3%
Aug 1
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42
Affected: 3.42
CVE-2018-3849
8.8
4%
Apr 16
In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data
Affected: before 3.490
CVE-2018-3848
8.8
4%
Apr 16
In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data
Affected: before 3.490
CVE-2018-3846
8.8
3%
Apr 16
In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data
Affected: 3.42
CVE-2026-111125
7.1
0%
Oct 15
CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble
Affected: through 4.7.0
CVE-2026-111124
7.1
0%
Oct 15
CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed
Affected: through 4.7.0
Showing 7