htslib vulnerabilities

CVEs whose affected-version data names the htslib package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116742Medium· 4.4

1w ago

HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count

HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncat…

▾ Sunlitsamtools · htslibEPSS 0.12%via CVEORG