<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: vcftools project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-1010127: VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free</title><link>https://patchthecve.com/cve/CVE-2019-1010127.html</link><guid>https://patchthecve.com/cve/CVE-2019-1010127.html</guid><pubDate>Wed, 17 Jun 2026 02:09:47 +0000</pubDate><description>HIGH 7.8: VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a s</description></item><item><title>CVE-2018-11130: The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a</title><link>https://patchthecve.com/cve/CVE-2018-11130.html</link><guid>https://patchthecve.com/cve/CVE-2018-11130.html</guid><pubDate>Wed, 17 Jun 2026 01:35:18 +0000</pubDate><description>HIGH 7.8: The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.</description></item><item><title>CVE-2018-11129: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a d</title><link>https://patchthecve.com/cve/CVE-2018-11129.html</link><guid>https://patchthecve.com/cve/CVE-2018-11129.html</guid><pubDate>Wed, 17 Jun 2026 01:35:18 +0000</pubDate><description>HIGH 7.8: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.</description></item><item><title>CVE-2018-11099: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause inf</title><link>https://patchthecve.com/cve/CVE-2018-11099.html</link><guid>https://patchthecve.com/cve/CVE-2018-11099.html</guid><pubDate>Wed, 17 Jun 2026 01:35:16 +0000</pubDate><description>MEDIUM 5.5: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.</description></item></channel></rss>