CVE-2026-31963 - Vulnerability Analysis

Overview

HTSlib < 1.23.1, 1.22.2, 1.21.1 contains a heap buffer overflow caused by an out-by-one error in CRAM feature decoding, letting attackers cause crashes or potentially execute arbitrary code, exploit requires opening a crafted file.

Severity & Score

Impact

Attackers can cause crashes or execute arbitrary code by opening a crafted CRAM file, potentially compromising the system.

Mitigation

Update to version 1.23.1 or later.

References

• https://github.com/samtools/htslib/commit/8bcc9907be0f945ddc31796d64f078fa05456acd
• https://github.com/samtools/htslib/security/advisories/GHSA-qgqh-h2q9-7w3c

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-31963 - High (8.1) HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of stori... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31963/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner