CVE-2019-11640: GNU Recutils

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function rec_fex_parse_str_simple at rec-fex.c in librec.a.

Affected products

• GNU Recutils: version 1.8 only

Published 2019-05-01. Last modified 2026-06-17.