CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.

Score

CVSS 3.0 7.8 High

Status

Modified - josh@bress.net

Published

2019-07-25

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Vcftools (Vcftools)
• Vcftools (Vcftools Project)

References

• https://docs.google.com/document/d/e/2PACX-1vQJveVcGMp_NMdBY5Je2K2k63RoCYznvKjJk5u1wJRmLotvwQkG5qiqZjpABcOkjzj49wkwGwei…
• https://github.com/vcftools/vcftools/issues/141