samtools

Products

ProductCVEsExploitedLatest
htslib11–Oct 26, 2026
samtools2–Mar 18, 2026

Exploited and recent CVEs

  • CVE-2026-116742 Medium 4.4 HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count 0.1%
  • CVE-2026-31973 Medium 6.9 NULL pointer dereference in samtools cram-size 0.6%
  • CVE-2026-31972 Medium 6.9 samtools mpileup has use-after-free leading to an invalid read 0.5%
  • CVE-2026-31971 High 7.1 HTSlib CRAM decoder vulnerable to buffer overflow 0.4%
  • CVE-2026-31970 High 7.1 HTSlib BGZF index file reader has a heap buffer overflow 0.5%
  • CVE-2026-31969 High 7.1 HTSlib CRAM decoder has a heap buffer overflow 0.4%
  • CVE-2026-31968 High 8.8 HTSlib CRAM decoder vulnerable to buffer overflow 0.4%
  • CVE-2026-31967 Medium 6.9 HTSlib CRAM reader has out-of-bounds read due to improper validation of input 0.5%
  • CVE-2026-31966 Medium 6.9 HTSlib CRAM reader has out-of-bounds read due to improper validation of input 0.5%
  • CVE-2026-31965 Medium 6.9 HTSlib CRAM reader has out-of-bounds reads due to improper validation of input 0.4%
  • CVE-2026-31964 Medium 6.9 HTSlib CRAM decoder has a NULL Pointer Dereference 0.3%
  • CVE-2026-31963 High 8.8 HTSlib CRAM reader has heap buffer overflow due to improper validation of input 0.4%
  • CVE-2026-31962 High 8.8 HTSlib CRAM reader has heap buffer overflow due to improper validation of input 0.4%