224 matches found
CVE-2020-36403
HTSlib up to version 1.10.2 is affected by CVE-2020-36403, which enables an out-of-bounds write in vcf_parse_format (invoked by vcf_parse and vcf_read). The issue is present in HTSlib’s handling of VCF parsing, with impact described as out-of-bounds write. Several connected sources confirm the vu...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403: Out-of-bounds Write
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
PT-2021-6593 · Htslib +1 · Htslib +1
Name of the Vulnerable Software and Affected Versions: HTSlib versions prior to 1.10.2 Description: The issue is related to the vcf parse format function in the HTSlib library, which does not properly check for excessive record size, allowing only individual fields to be checked. This can be...
htslib:hts_open_fuzzer: Heap-use-after-free in decode_name
Detailed Report: https://oss-fuzz.com/testcase?key=5662909893050368 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62a00000025d Crash State: decodename decodenames...
USN-4802-1: HTSlib vulnerabilities
It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. CVE-2017-1000206 It was discovered that HTSlib incorrectly handled certain files. An attacker could possibly use this iss...
USN-4802-1 htslib vulnerabilities
It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. CVE-2017-1000206 It was discovered that HTSlib incorrectly handled certain files. An attacker could possibly use this iss...
htslib:hts_open_fuzzer: Crash in decode_name
Detailed Report: https://oss-fuzz.com/testcase?key=5569224791687168 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f975a7f2805 Crash State: decodename decodenames cramuncompressblock...
htslib:hts_open_fuzzer: Heap-buffer-overflow in rle_decode
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4875963282358272 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x60b0000002be Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in unstripe
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5116014876557312 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
htslib:hts_open_fuzzer: Heap-buffer-overflow in safe_ltf8_get
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5102088579317760 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000134d Crash...
htslib:hts_open_fuzzer: Heap-double-free in decode_names
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6090646706323456 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60b000000ce0 Crash State:...
htslib:hts_open_fuzzer: Heap-buffer-overflow in rans_uncompress_to_4x16
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4797759477645312 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
htslib:hts_open_fuzzer: Heap-buffer-overflow in safe_itf8_get
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6001864128724992 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
htslib:hts_open_fuzzer: Heap-buffer-overflow in int32_get_blk
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5642821270896640 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100002ba81 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in safe_ltf8_get
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5196296807907328 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000840 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_xpack_decode_init
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5312888543772672 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61d000001cf8 Cras...
htslib:hts_open_fuzzer: Heap-buffer-overflow in rans_uncompress_to_4x16
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4825968776708096 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...