CVE-2026-31973

A flaw was found in SAMtools. In the cram-size command, a missing check for the return value of the cramdecodecompressionheader function can lead to a NULL pointer dereference. An attacker could exploit this by providing a specially crafted CRAM file. This vulnerability typically causes the progr...

CVE-2026-31969

A flaw was found in HTSlib, a library used for bioinformatics file formats. A remote attacker could exploit an out-by-one error when processing a specially crafted CRAM Compressed Reference-oriented Alignment Map file. This vulnerability can lead to a heap buffer overflow, potentially allowing fo...