CVE-2026-111124
Description
A flaw was found in cfitsio. An attacker could exploit this vulnerability by supplying a specially crafted Flexible Image Transport System (FITS) file containing compressed image data with invalid dither parameters. When processed by an application using the library, this flaw triggers an out-of-bounds heap read that can cause the application to crash, resulting in a Denial of Service (DoS), or potentially lead to unauthorized information disclosure by leaking heap memory.
Statement
This vulnerability is evaluated with a Moderate severity rating because exploitation requires user interaction to process an untrusted FITS image file locally, restricting the scope of the crash or information leak to the calling application process. The cfitsio library is primarily utilized by specialized scientific and data processing applications rather than core system services in Red Hat Enterprise Linux. While an attacker can cause denial of service or potentially read portions of process heap memory, remote code execution is not possible and system-wide availability is unaffected.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.1 | 7.1 | 6.1 |
| Attack Vector | Local | Local | Local |
| Attack Complexity | Low | Low | Low |
| Privileges Required | None | None | None |
| User Interaction | Required | Required | Required |
| Scope | Unchanged | Unchanged | Unchanged |
| Confidentiality | Low | High | Low |
| Integrity Impact | None | None | None |
| Availability Impact | High | High | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
