CVE-2019-12900

CriticalCVSS 9.8

Published: 19/06/2019(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.98%

95th percentile - higher than 95% of all known CVEs

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

An attacker could exploit this vulnerability to cause a program crash or potentially execute code, potentially leading to system security compromise.

Upgrade bzip2 to a version later than 1.0.6 that includes a fix for this vulnerability.

Original NVD description (English source)

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS