Log in Start free

Vulnerability · Published Oct 15, 2026 · Assigned by VulnCheck

CVE-2026-111124CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed

Medium 6.1

In plain English

A medium-severity out-of-bounds read in cfitsio from HEASARC. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.2%top 85.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 seed. Attackers can supply a crafted FITS file with a SUBTRACTIVE_DITHER_1 compressed image, read through fits_open_file() and fits_read_pix(), to cause crashes or leak heap contents in decoded pixels.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12cfitsiono fix listedDEBIAN-CVE-2026-111124
Debian:13cfitsiono fix listedDEBIAN-CVE-2026-111124
Debian:14cfitsiono fix listedDEBIAN-CVE-2026-111124
Ubuntu:22.04:LTScfitsiono fix listedUBUNTU-CVE-2026-111124
Ubuntu:24.04:LTScfitsiono fix listedUBUNTU-CVE-2026-111124
Ubuntu:26.04:LTScfitsiono fix listedUBUNTU-CVE-2026-111124
Ubuntu:26.10cfitsiono fix listedUBUNTU-CVE-2026-111124

Affected products (as reported)

VendorProductVersions
HEASARC cfitsio 0 – through 4.7.0

Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

References