← Back

Burrow Wheeler Aligner

burrow-wheeler_aligner

Vendor: Burrow Wheeler Aligner Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-11371
1Burrow Wheeler Aligner Project
1Burrow Wheeler Aligner
Jun 17, 2026
Apr 20, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c.
CVE-2019-10269
2Burrow Wheeler Aligner Project
Canonical
2Burrow Wheeler Aligner
Ubuntu Linux
Jun 17, 2026
Mar 29, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.