CVE-2026-31967

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-31967
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31967.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-31967
Aliases
  • GHSA-33x5-c6vj-8f2w
Downstream
Published
2026-03-18T19:15:48.891Z
Modified
2026-04-10T05:42:53.843748Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
HTSlib CRAM reader has out-of-bounds read due to improper validation of input
Details

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cram_decode_slice() function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value, for example when converting the data to SAM format, could result in the out of bounds array reads when looking up the corresponding reference name. If the array value obtained also happened to be a valid pointer, it would be interpreted as a string and an attempt would be made to write the data as part of the SAM record. This bug may allow information about program state to be leaked. It may also cause a program crash through an attempt to access invalid memory. Versions 1.23.1, 1.22.2 and 1.21.1 include fixes for this issue. There is no workaround for this issue.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31967.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-125",
        "CWE-129"
    ]
}
References

Affected packages

Git / github.com/samtools/htslib

Affected ranges

Type
GIT
Repo
https://github.com/samtools/htslib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4d33bcb31831165a4d0dbf85114ff4085c0baf1f
Last affected
86e74e065e39749d25636f8454773d9d898c5eb3
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.21.1"
        },
        {
            "last_affected": "= 1.23"
        }
    ]
}
Type
GIT
Repo
https://github.com/samtools/htslib
Events
Introduced
36f20e7c1f0bd4d094c4e91836f757caef16475a
Fixed
45034a719156b68705b9bbfba2156bfc2b4c6749
Database specific 
{
    "versions": [
        {
            "introduced": "1.22"
        },
        {
            "fixed": "1.22.2"
        }
    ]
}

Affected versions

0.*
0.2.0-rc10
0.2.0-rc11
0.2.0-rc12
0.2.0-rc2
0.2.0-rc3
0.2.0-rc4
0.2.0-rc5
0.2.0-rc6
0.2.0-rc7
0.2.0-rc8
0.2.0-rc9
1.*
1.0
1.1
1.10
1.10.1
1.10.2
1.11
1.11.0
1.12
1.13
1.14
1.15
1.15.1
1.16
1.17
1.18
1.19
1.19.1
1.2
1.2.1
1.20
1.21
1.22
1.22.1
1.23
1.3
1.3.1
1.3.2
1.4
1.4.1
1.5
1.6
1.7
1.8
1.9
Other
stable1
stable2
vcf-direct-final

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31967.json"