CVE-2026-31971 - Vulnerability Analysis

Overview

HTSlib contains a buffer overflow caused by improper validation in cram_byte_array_len_decode() when reading BYTE_ARRAY_LEN encoded CRAM data, letting attackers cause crashes or execute arbitrary code, exploit requires crafted input file.

Severity & Score

Impact

Attackers can cause crashes, data corruption, or execute arbitrary code by opening crafted files.

Mitigation

Update to version 1.23.1 or later.

References

• https://github.com/samtools/htslib/commit/01cd003b46fa2ebea4d9be5475b11217eb4c11be
• https://github.com/samtools/htslib/security/advisories/GHSA-jvx4-4wq7-6fmh

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-31971 - High (8.1) HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the `BYTE_ARRAY_LEN... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31971/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner