CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115504
HIGHCVSS 7.8NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string a
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54630 CRITICAL 9.6
- CVE-2026-54631 MEDIUM 6.3
- CVE-2026-19678
- CVE-2026-115536 MEDIUM 4.3
- CVE-2026-115537 MEDIUM 4.3
- CVE-2026-115535 LOW 2.4
- CVE-2026-115534 MEDIUM 4.3
- CVE-2026-114625
- CVE-2026-83938 CRITICAL 10
- CVE-2026-114620 MEDIUM 5.4