Samtools vulnerabilities

Products

• Htslib 11
• Samtools 2

Newest

• samtools htslib HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count CVE-2026-116742 4.8 MediumOctober 26, 2026
• samtools NULL pointer dereference in samtools cram-size CVE-2026-31973 6.9 MediumMarch 18, 2026
• samtools samtools mpileup has use-after-free leading to an invalid read CVE-2026-31972 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31971 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib BGZF index file reader has a heap buffer overflow CVE-2026-31970 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder has a heap buffer overflow CVE-2026-31969 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31968 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31967 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31966 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds reads due to improper validation of input CVE-2026-31965 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM decoder has a NULL Pointer Dereference CVE-2026-31964 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31963 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31962 Fix available 8.8 HighMarch 18, 2026
• samtools htsjdk Creation of Temporary File in Directory with Insecure Permissions CVE-2022-21126 Fix available 7.3 HighNovember 29, 2022