CVE-2026-31971

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.1HIGH

CVE-2026-31970

< 1.21

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF]

8.1HIGH

CVE-2026-31969

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.1HIGH

CVE-2026-31968

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.1HIGH

CVE-2026-31967

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

9.1CRITICAL

CVE-2026-31966

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

9.1CRITICAL

CVE-2026-31965

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.2HIGH

CVE-2026-31964

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

7.5HIGH

CVE-2026-31963

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.1HIGH

CVE-2026-31962

< 1.21.1

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence ali

8.8HIGH

CVE-2020-36403

<= 1.10.2

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

8.8HIGH

CVE-2018-14329

all versions

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

4.7MEDIUM

CVE-2018-13845

all versions

An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.

9.8CRITICAL

CVE-2018-13844

all versions

An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion

7.5HIGH

CVE-2018-13843

all versions

An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is

7.5HIGH

CVE-2017-1000206

<= 1.4.0

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential a

9.8CRITICAL