Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Vendor: samtools Clear all filters
TI-2026-80951 CVE-2026-116742 · GHSA-r296-8jjg-794r

Heap out-of-bounds write in HTSlib via truncated .gzi index count

Priority LOW 21

HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00123 Published 2026-10-26 No fix listed CWE-197
TI-2026-24517 CVE-2026-31973

NULL pointer dereference in samtools cram-size

Priority LOW 31

SAMtools is a program for reading, manipulating and writing bioinformatics file formats.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00555 Published 2026-03-18 Fixed in 1.21.1, 1.22.2 CWE-476
TI-2022-05532 CVE-2022-21126 · GHSA-96vh-4rfp-c42c

Creation of Temporary File in Directory with Insecure Permissions

Priority HIGH 67

The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existen…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00753 Published 2022-11-29 Fixed in 3.0.1 CWE-668