CVE-2026-31968 - Vulnerability Analysis

Overview

HTSlib contains a buffer overflow caused by incomplete validation of VARINT and CONST encodings in CRAM format, letting attackers cause heap or stack overflow and potentially execute arbitrary code, exploit requires opening crafted file.

Severity & Score

Impact

Attackers can cause crashes, data corruption, or potentially execute arbitrary code by opening crafted files.

Mitigation

Update to versions 1.23.1, 1.22.2, 1.21.1 or later.

References

• https://github.com/samtools/htslib/commit/0ec436796eca7b4ce7fcc9b77270c102da29bb2e
• https://github.com/samtools/htslib/security/advisories/GHSA-cgcm-c9r2-p57j

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-31968 - High (8.1) HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. For the `VARINT` and `CONST` encodings, incomplete ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31968/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner