Description (CNA)
VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VCFTools / vcftools | affected < 0.1.15 |
CWE
No CWE identifiers supplied.
References
- https://docs.google.com/document/d/e/2PACX-1vQJveVcGMp_NMdBY5Je2K2k63RoCYznvKjJk5u1wJRmLotvwQkG5qiqZjpABcOkjzj49wkwGweiFwrc/pub
- https://github.com/vcftools/vcftools/issues/141
ADP enrichment
No English description supplied.