CVE-2026-31962 - Vulnerability Analysis

Overview

HTSlib contains a heap buffer overflow caused by improper handling of certain CRAM format records in cram_decode_seq(), letting attackers cause crashes or potentially execute arbitrary code, exploit requires opening a crafted file.

Severity & Score

Impact

Attackers can cause crashes or potentially execute arbitrary code by opening a crafted CRAM file.

Mitigation

Update to version 1.23.1, 1.22.2, 1.21.1 or later.

References

• https://github.com/samtools/htslib/commit/d799b54c6401879187bba4741be83ff590ac73e3
• https://github.com/samtools/htslib/security/advisories/GHSA-xxmp-v7h3-gpwp

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-31962 - High (8.8) HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31962/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner