CVE-2026-31967 - Vulnerability Analysis
CriticalCVSS: 9.1Last Updated: March 19, 2026
HTSlib - Out of Bounds Read
Published: March 18, 2026Updated: March 19, 2026Remote Exploitable
Overview
HTSlib contains an out of bounds read caused by lack of validation of mate reference id in cram_decode_slice(), letting attackers cause information disclosure or program crash, exploit requires crafted CRAM input.
Severity & Score
Severity: Critical
CVSS Score: 9.1
Impact
Attackers can cause information leakage or program crash, potentially disrupting service or exposing sensitive data.
Mitigation
Update to versions 1.23.1, 1.22.2, 1.21.1 or later.
References
Related Resources
Details
- CVE ID
- CVE-2026-31967
- Severity
- Critical
- CVSS Score
- 9.1
- Type
- out_of_bounds_rw
- Status
- confirmed
CWE
- CWE-125
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H