CVE-2019-6456: GNU Recutils

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a.

Affected products

• GNU Recutils: version 1.8 only

Published 2019-01-16. Last modified 2026-06-17.