CVE-2026-31973

SAMtools cram-size contained a missing-check path for cram_decode_compression_header() that could cause a NULL pointer dereference, potentially crashing the program. This affects SAMtools before the fixed releases, with fixes shipped in versions 1.23.1, 1.22.2 and 1.21.1. No workaround is availab...