samtools CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM samtools CVE published 2026-10-26

CVE-2026-116742

A heap out-of-bounds write and read vulnerability exists in HTSlib through 1.24. The vulnerability is caused by a crafted .gzi index entry count that can corrupt heap memory. This vulnerability affects tools like samtools and bcftools. Defenders should prioritize patching or upgrading to a fixed version of HTSlib to prevent heap corruption or crashes. The vulnerability can cause significant disruptions to [truncated]