CVE-2026-31965 - Vulnerability Analysis

Overview

HTSlib contains an out of bounds read caused by late validation of the reference id field in the cram_decode_slice() function, letting attackers leak memory values or cause crashes, exploit requires crafted CRAM data.

Severity & Score

Impact

Attackers can leak memory values or cause program crashes, potentially leading to denial of service or information disclosure.

Mitigation

Update to versions 1.23.1, 1.22.2, 1.21.1 or later.

References

• https://github.com/samtools/htslib/security/advisories/GHSA-mqm2-v645-3qhr
• https://github.com/samtools/htslib/commit/9cefb46453ad471e933b8212d4f45920524d3357

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-31965 - High (8.2) HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function called while reading CRAM records, validation of the reference id ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31965/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner