Htslib vulnerabilities

Products

• Htslib 16

Newest

• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31971 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib BGZF index file reader has a heap buffer overflow CVE-2026-31970 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder has a heap buffer overflow CVE-2026-31969 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31968 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31967 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31966 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds reads due to improper validation of input CVE-2026-31965 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM decoder has a NULL Pointer Dereference CVE-2026-31964 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31963 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31962 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib 1.10 through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from... CVE-2020-36403 Fix available 8.8 HighJuly 1, 2021
• htslib In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary... CVE-2018-14329 4.7 MediumJuly 17, 2018
• htslib An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c. CVE-2018-13845 Fix available 9.8 CriticalJuly 10, 2018
• htslib ** DISPUTED ** An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c.... CVE-2018-13844 Fix availableDisputed 7.5 HighJuly 10, 2018
• htslib ** DISPUTED ** An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf... CVE-2018-13843 Fix availableDisputed 7.5 HighJuly 10, 2018
• htslib samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM... CVE-2017-1000206 Fix available 9.8 CriticalNovember 17, 2017