Htslib

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Htslib records in CISA KEV

No Htslib vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Htslib 16 records MEDIUM

Records

16 records in Htslib · all components

TI-2017-14524 CVE-2017-1000206 · GHSA-mfgv-xhqh-pmvp

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the…

MEDIUM 46

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02228 Published 2017-11-17 No fix listed CWE-119

TI-2018-10042 CVE-2018-13845 · GHSA-gjpv-p8qj-966m

An issue has been found in HTSlib 1.8.

MEDIUM 45

An issue has been found in HTSlib 1.8.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01695 Published 2018-07-10 No fix listed CWE-125

TI-2026-24512 CVE-2026-31968

HTSlib CRAM decoder vulnerable to buffer overflow

MEDIUM 44

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00434 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-121

TI-2026-24507 CVE-2026-31963

HTSlib CRAM reader has heap buffer overflow due to improper validation of input

MEDIUM 44

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00369 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-122

TI-2026-24506 CVE-2026-31962

HTSlib CRAM reader has heap buffer overflow due to improper validation of input

MEDIUM 44

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00383 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-122

TI-2020-18654 CVE-2020-36403 · GHSA-9cpm-77gg-x323

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

MEDIUM 41

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01593 Published 2021-07-01 No fix listed CWE-787

TI-2026-24511 CVE-2026-31967

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

LOW 37

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00472 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-125

TI-2026-24510 CVE-2026-31966

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

LOW 37

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0055 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-125

TI-2026-24509 CVE-2026-31965

HTSlib CRAM reader has out-of-bounds reads due to improper validation of input

LOW 37

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-125

TI-2026-24508 CVE-2026-31964

HTSlib CRAM decoder has a NULL Pointer Dereference

LOW 36

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00342 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-476

TI-2018-10041 CVE-2018-13844 · GHSA-2f5j-prvf-gf42

An issue has been found in HTSlib 1.8.

LOW 36

An issue has been found in HTSlib 1.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01441 Published 2018-07-10 No fix listed CWE-401

TI-2018-10040 CVE-2018-13843 · GHSA-fqfp-r4jq-mf88

An issue has been found in HTSlib 1.8.

LOW 36

An issue has been found in HTSlib 1.8.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01472 Published 2018-07-10 No fix listed CWE-772

TI-2026-24514 CVE-2026-31970

HTSlib BGZF index file reader has a heap buffer overflow

LOW 32

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00479 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-122

TI-2026-24515 CVE-2026-31971

HTSlib CRAM decoder vulnerable to buffer overflow

LOW 31

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00357 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-121

TI-2026-24513 CVE-2026-31969

HTSlib CRAM decoder has a heap buffer overflow

LOW 31

HTSlib is a library for reading and writing bioinformatics file formats.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00357 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-122

TI-2018-10273 CVE-2018-14329 · GHSA-2rqr-64j8-q8px

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite…

LOW 21

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00247 Published 2018-07-17 No fix listed CWE-362

Open these records in search →

Critical	2
High	9
Medium	5
Low	0
No CVSS	0