Read the docs

samtools

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

samtools records in CISA KEV

No samtools vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Samtools 2 records LOW Htsjdk 1 record HIGH

Records

14 records

TI-2022-05532 CVE-2022-21126 · GHSA-96vh-4rfp-c42c

Creation of Temporary File in Directory with Insecure Permissions

Priority HIGH 67

The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existen…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00753 Published 2022-11-29 Fixed in 3.0.1 CWE-668
TI-2026-24517 CVE-2026-31973

NULL pointer dereference in samtools cram-size

Priority LOW 31

SAMtools is a program for reading, manipulating and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00555 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-476
TI-2026-80951 CVE-2026-116742 · GHSA-r296-8jjg-794r

Heap out-of-bounds write in HTSlib via truncated .gzi index count

Priority LOW 21

HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00123 Published 2026-10-26 No fix listed CWE-197
Open these records in search →