BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
| Software | From | Fixed in |
|---|---|---|
| burrow-wheeler_aligner_project / burrow-wheeler_aligner | - | 2019-01-23 |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 19.04 | 19.04.x |