Vulnerabilities > CVE-2019-1010127 - Use After Free vulnerability in Vcftools Project Vcftools 0.1.13/0.1.14

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
vcftools-project
CWE-416
NVD
Published: 2019-07-25
Updated: 2024-11-21

Summary

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.

Vulnerable Configurations

Part Description Count
Application
Vcftools_Project
2

Common Weakness Enumeration (CWE)

References