OSV-2026-863 Global-buffer-overflow in cram_decoder_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519841736 Crash type: Global-buffer-overflow READ 8 Crash state: cramdecoderinit cramdecodecompressionheader cramnextslice...

CVE-2026-31973: NULL Pointer Dereference

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in the cram-size command, used to write information about how well CRAM files are compressed, a check to see if the cramdecodecompressionheader was missing. If the function returned ...

OSV-2021-240 Heap-buffer-overflow in safe_itf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29908 Crash type: Heap-buffer-overflow READ 1 Crash state: safeitf8get cramdecodecompressionheader cramfirstslice...

OSV-2021-229 Heap-buffer-overflow in cram_xpack_decode_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29827 Crash type: Heap-buffer-overflow WRITE 4 Crash state: cramxpackdecodeinit cramdecoderinit cramdecodecompressionheader...