CVE-2026-111124 | HEASARC CFITSIO up to 4.7.0 Unquantize Helpers imcompress.c unquantize ZDITHER0 out-of-bounds

October 15, 2026 Yanac

A vulnerability labeled as problematic has been found in HEASARC CFITSIO up to 4.7.0. This vulnerability affects the function unquantize of the file imcompress.c of the component Unquantize Helpers. Executing a manipulation of the argument ZDITHER0 can lead to out-of-bounds read.

This vulnerability appears as CVE-2026-111124. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More