Htslib

16 CVEs across 1 Htslib products. Browse Htslib vulnerabilities, severities, and proof-of-concept exploits.

Htslib products with known CVEs

ProductCVEs
Htslib16
Htslib CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-31971High8.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety o…
CVE-2026-31970High8.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF] files. In the GZI loading fu…
CVE-2026-31969High8.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety o…
CVE-2026-31968High8.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety o…
CVE-2026-31967Critical9.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_dec…
CVE-2026-31966Critical9.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of…
CVE-2026-31965High8.22026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_dec…
CVE-2026-31964High7.52026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety o…
CVE-2026-31963High8.12026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of…
CVE-2026-31962High8.82026-03-18HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most align…
CVE-2020-36403High8.82021-07-01HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).
CVE-2018-14329Medium4.72018-07-17In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.
CVE-2018-13845Critical9.82018-07-10An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
CVE-2018-13844High7.52018-07-10An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exis…
CVE-2018-13843High7.52018-07-10An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free mem…
CVE-2017-1000206Critical9.82017-11-17samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution