CVE-2026-31967

A flaw was found in HTSlib, a library used for bioinformatics file formats. When processing CRAM Compressed Reference-oriented Alignment Map records, the cramdecodeslice function fails to validate the mate reference ID field. This oversight allows an attacker to craft a malicious CRAM file, which...

HTSlib input validation vulnerability

HTSlib is a C-language library file developed by samtools. Versions of HTSlib prior to 1.23.1, 1.22.2, and 1.21.1 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of verification of the paired reference ID field in the cramdecodeSlice function...

PT-2026-26143

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cram decode slice function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value,...

PT-2020-22664

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash involves the hts md5 update, cram decode slice, and cram next...

PT-2020-21818

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash has been reported, involving the functions hts md5 update, cram decode slice, and cram decode slice mt. No information is...