← Vulnerability feed

Vulnerability record · CVE-2019-10063 · published 26 March 2019

CVE-2019-10063: Flatpak improper input validation vulnerability

Flatpak · Flatpak

Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.

9.0 CVSS 3.0 Critical EPSS 1.9% · top 21.0% CWE-20 · Improper input validation
9.0CVSS 3.0 base score, v2 6.8
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/errata/RHSA-2019:1024
https://access.redhat.com/errata/RHSA-2019:1143
https://github.com/flatpak/flatpak/issues/2782 Issue TrackingPatchThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:1024
https://access.redhat.com/errata/RHSA-2019:1143
https://github.com/flatpak/flatpak/issues/2782 Issue TrackingPatchThird Party Advisory

Track CVE-2019-10063 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2024-42472Flatpak injection vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app us…EPSS 1.3%9.3CVE-2026-34078Flatpak link following vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options…EPSS 0.90%8.8CVE-2021-21261Flatpak injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` ser…EPSS 0.57%8.8CVE-2018-6560Flatpak interpretation conflict vulnerabilityIn dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break ou…EPSS 0.41%8.7CVE-2026-34079Flatpak path traversal vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without pro…EPSS 0.44%8.6CVE-2021-43860Flatpak improper privilege management vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the…EPSS 1.3%8.4CVE-2024-32462Flatpak argument injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1…EPSS 0.51%8.2CVE-2021-21381Flatpak injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before versi…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2019-10063), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.