CVEs-PoC/2018/CVE-2018-3846.md

CVE-2018-3846

Description

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

POC

Reference

No PoCs from references.

Github

• https://github.com/ANG13T/aerospace-cve-list