Samtools Htslib vulnerabilities

• samtools htslib HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count CVE-2026-116742 4.8 MediumOctober 26, 2026
• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31971 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib BGZF index file reader has a heap buffer overflow CVE-2026-31970 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder has a heap buffer overflow CVE-2026-31969 Fix available 7.1 HighMarch 18, 2026
• htslib HTSlib CRAM decoder vulnerable to buffer overflow CVE-2026-31968 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31967 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds read due to improper validation of input CVE-2026-31966 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has out-of-bounds reads due to improper validation of input CVE-2026-31965 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM decoder has a NULL Pointer Dereference CVE-2026-31964 Fix available 6.9 MediumMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31963 Fix available 8.8 HighMarch 18, 2026
• htslib HTSlib CRAM reader has heap buffer overflow due to improper validation of input CVE-2026-31962 Fix available 8.8 HighMarch 18, 2026