CVE-2018-3847: Buffer Overflow
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-3847?
CVE-2018-3847 refers to multiple exploitable buffer overflow vulnerabilities in the image parsing functionality of the CFITSIO library version 3.42.
What is the severity of CVE-2018-3847?
The severity of CVE-2018-3847 is rated as high with a CVSS score of 8.8.
What software is affected by CVE-2018-3847?
The CFITSIO library version 3.42 is affected by CVE-2018-3847.
How can CVE-2018-3847 be exploited?
CVE-2018-3847 can be exploited by parsing specially crafted images via the CFITSIO library, which can cause a stack-based buffer overflow and overwrite arbitrary data.
Are there any references for CVE-2018-3847?
Yes, you can find more information about CVE-2018-3847 at the following references: [Link 1](https://security.gentoo.org/glsa/202101-24), [Link 2](https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0530).