Lucene search

K
redhatcveRedhat.comRH:CVE-2018-3849
HistoryMay 14, 2019 - 12:00 p.m.

CVE-2018-3849

2019-05-1412:00:37
redhat.com
access.redhat.com
9

0.004 Low

EPSS

Percentile

74.4%

In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.