CVE-2018-3848

Name of the Vulnerable Software and Affected Versions NASA CFITSIO version 3.42

Description The issue is related to a stack-based buffer overflow in the ffghbn function when parsing specially crafted images via the library. This can lead to overwriting arbitrary data, potentially allowing an attacker to gain code execution by delivering a crafted FIT image.

Recommendations For NASA CFITSIO version 3.42, consider disabling the ffghbn function until a patch is available to prevent potential exploitation. Restrict access to parsing untrusted FIT images to minimize the risk of triggering this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.