CVE-2019-12937: Toaruos Project Toaruos

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable.

Affected products

• Toaruos Project Toaruos: up to and including 1.10.9

Published 2019-06-23. Last modified 2026-06-17.