CVE-2019-11371: Burrow-Wheeler Aligner Project Burrow-Wheeler Aligner

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c.

Affected products

• Burrow-Wheeler Aligner Project Burrow-Wheeler Aligner: version 0.7.17 only

Published 2019-04-20. Last modified 2026-06-17.