Medium severity5.5OSV Advisory· Published May 17, 2018· Updated Jun 17, 2026

CVE-2018-11099

Description

The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vcftools/VcftoolsOSV2 versions
v0.1.14, v0.1.15+ 1 more
- (no CPE)range: v0.1.14, v0.1.15
- (no CPE)range: =0.1.15

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2018/May/43nvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2019/05/msg00039.htmlnvd
usn.ubuntu.com/3974-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000