Lucene search

K
redhatcveRedhat.comRH:CVE-2018-3848
HistoryMay 14, 2019 - 12:00 p.m.

CVE-2018-3848

2019-05-1412:00:17
redhat.com
access.redhat.com
10

EPSS

0.004

Percentile

74.4%

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.