245 matches found
CVE-2026-116742
A flaw was found in HTSlib. A local attacker can cause a Denial of Service DoS or memory corruption by convincing a user to process a specially crafted index file. Due to improper integer handling when reading index entry counts, the library performs out-of-bounds heap memory operations, resultin...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
Linux Distros Unpatched Vulnerability : CVE-2026-116742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by...
EUVD-2026-110490
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
DEBIAN-CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
UBUNTU-CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742 HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742 HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
CVE-2026-116742
HTSlib versions through 1.24 are vulnerable to a heap out-of-bounds write and read flaw in the bgzf_index_load_hfile() function within bgzf.c. The root cause is a numeric truncation error (CWE-197) where providing a crafted .gzi index entry count of 0xFFFFFFFF truncates noffs to zero. This result...
CVE-2026-116742 HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzfindexloadhfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
PT-2026-125491
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf index load hfile in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc0 buffer and an...
Samtools htslib numerical error vulnerability
Samtools htslib versions 1.24 and earlier contain a numerical error vulnerability. This vulnerability stems from heap-based out-of-bounds writes and reads in bgzfindexloadhfile within bgzf.c. Attackers can exploit this by providing specially crafted .gzi index entries to manipulate heap memory,...
htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5098931189776384 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x78e01cee57d2 Crash...
OESA-2026-3491 htslib security update
HTSlib is an implementation of a unified C library for accessing common file formats, such as SAM, CRAM and VCF, used for high-throughput sequencing data, and is the core library used by samtools and bcftools. HTSlib only depends on zlib. It is known to be compatible with gcc, g++ and clang. HTSl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: htslib (UTSA-2026-093600)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093600 advisory. HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread. Tenable has extracted the preceding description block...
ANT-2026-H4RM2RMD · htslib · Out-of-Bounds Access
oob-write medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-H4RM2RMD: Out-of-bounds access in CRAM xpack/xrle...
OESA-2026-2757 htslib security update
HTSlib is an implementation of a unified C library for accessing common file formats, such as SAM, CRAM and VCF, used for high-throughput sequencing data, and is the core library used by samtools and bcftools. HTSlib only depends on zlib. It is known to be compatible with gcc, g++ and clang. HTSl...