CVE-2026-111125 | HEASARC CFITSIO up to 4.7.0 HCOMPRESS tile decoder fits_hdecompress.c input_nnybble out-of-bounds

October 15, 2026 Yanac

A vulnerability was found in HEASARC CFITSIO up to 4.7.0 and classified as problematic. This affects an unknown function of the file fits_hdecompress.c of the component HCOMPRESS tile decoder. Executing a manipulation of the argument input_nnybble can lead to out-of-bounds read.

This vulnerability is tracked as CVE-2026-111125. The attack is restricted to local execution. No exploit exists.VulDB Recent EntriesRead More