Burrow-wheeler Aligner Project Burrow-wheeler Aligner — known CVE vulnerabilities

Every CVE whose affected-product data names Burrow-wheeler Aligner Project Burrow-wheeler Aligner, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-10269 — CVSS 9.8 (critical): BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long…
• CVE-2019-11371 — CVSS 9.8 (critical): BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump…