OSV-2026-1512
Heap-buffer-overflow in cram_encode_container
No scoreFix available
OSV-2026-1512 is a vulnerability with no CVSS score yet in htslib, published November 8, 2026. No source lists public exploit code. A source reports a fix.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998
Crash type: Heap-buffer-overflow READ 1
Crash state:
cram_encode_container
cram_flush_container_mt
cram_put_bam_seq
Affected packages
| Package | Affected | Fixed |
|---|---|---|
htslibOSS-Fuzz | Listed versions, plus commit ranges 1.21.11.21.21.21.31.22.11.22.2 Show 9 moreShow less1.22.31.22.41.231.23.11.23.21.23.31.241.24.11.25 | None known |
What each source reports
OSVNo score
Heap-buffer-overflow in cram_encode_container
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582906998
Crash type: Heap-buffer-overflow READ 1
Crash state:
cram_encode_container
cram_flush_container_mt
cram_put_bam_seq
- Record
OSV-2026-1512- Updated
- 2026-11-12
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.