CVE intelligence

CVE-2019-12439

Vulnerability intelligence

Published May 29, 2019Sources checked Nov 10, 2026

7.8HIGHCVSS out of 10

What this means

Review the available evidence

CVE-2019-12439 and is rated High severity with a CVSS score of 7.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Ubuntu Security Notices guidance

Vendor revision: Sep 17, 2026

USN-8779-1 fixed vulnerabilities in Bubblewrap.

CISA KEVNot listedBased on the latest collected catalog

EPSS0.6%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2019-12439?

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.

Source: NVD