CVE-2018-11130
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 22%
exploitation probability
22%top 2% of all CVEs
observed exploitation
nono source reports it
The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
Affected products
n/a · n/a