CVE-2019-1010127: Vcftools Project Vcftools

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.

Affected products

• Vcftools Project Vcftools: before 0.1.15 (fixed in 0.1.15)

Published 2019-07-25. Last modified 2026-06-17.