Htslib · Htslib · CVE-2026-31969
**Name of the Vulnerable Software and Affected Versions**
HTSlib versions prior to 1.23.1
HTSlib version 1.22.2
HTSlib version 1.21.1
**Description**
HTSlib is a library used for reading and writing bioinformatics file formats. A heap buffer overflow can occur when reading data encoded using the `BYTE ARRAY STOP` method due to an out-by-one error in the `cram byte array stop decode char()` function. This error allows a single attacker-controlled byte to be written beyond the allocated heap space. Exploitation of this issue could lead to program crashes, data corruption, or potentially arbitrary code execution if a specially crafted file is opened.
**Recommendations**
Update HTSlib to version 1.23.1 or later.
Update HTSlib to version 1.22.2 or later.
Update HTSlib to version 1.21.1 or later.