cfitsio-4.5.0-utility-vuln-PoC

This repository provides a PoC for vulnerabilities uncovered in the NASA-CFITSIO utility tool (4.5.0) via fuzzing.

• Utility Tool Heap Buffer Overflow Vulnerability
• Utility Tool Negative Size Parameter Vulnerability

Details

• Library: NASA-CFITSIO
• Version: v4.5.0 (2024/8)

Credit

• SongHyun Bae (@bshyuunn) of TeamH4C
• GeonWoo Lee (@Cheshire) of TeamH4C
• SungJin Park (@oulth) of TeamH4C, LIGNex1
• DongHyun Kim (@longlong64bit) of TeamH4C
• JunOhLee (@IceTream) of TeamH4C

NASA-CFITSIO Changes Log