CVE-2018-3847 - CVE House
Back to Database
Status published High CVE-2018-3847

Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality...

Vulnerability Description

Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-3847

Credits & Attribution

No credits recorded in the NVD database.

References

More from NASA

View All →
CVE-2025-46675
In NASA CryptoLib before 1.3.2, the key state is not...
Low 3.5
CVE-2025-46674
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a...
Low 3.5
CVE-2025-46673
NASA CryptoLib before 1.3.2 does not check whether the SA...
Medium 4.9
CVE-2025-46672
NASA CryptoLib before 1.3.2 does not check the OTAR crypto...
Low 3.5
CVE-2019-1010060
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow....
Critical 9.8

Affected Vendor

Affected Software

CFITSIO
Vulnerable Versions:
3.42

Timeline

Official Publish: August 1st, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.