CVE-2019-10269

CRITICAL 9.8CVE-2019-10269 · Published 29/03/2019 · updated 17/06/2026

In short

CVE-2019-10269 is a CRITICAL (CVSS 9.8) vulnerability affecting burrow-wheeler aligner (burrow-wheeler aligner project).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
Fix: update to 2019-01-23 or later.

Package	Affected versions	Patched versions
burrow-wheeler aligner burrow-wheeler_aligner_project	`< 2019-01-23`	`2019-01-23`

Description

BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.

References

coreymhudson.github.io/bwa_vulnerabilties · Exploit
lh3/bwa#232 · Patch
usn.ubuntu.com/4087-1 · Third Party Advisory

More vulnerabilities in burrow-wheeler aligner

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free