CVE-2026-31970 | samtools htslib up to 1.21.0/1.22.1/1.23 GZI File Parser bgzf_index_load_hfile heap-based overflow (GHSA-p345-84hx-fq6q)

March 19, 2026 Yanac

A vulnerability was found in samtools htslib up to 1.21.0/1.22.1/1.23 and classified as critical. Affected is the function bgzf_index_load_hfile of the component GZI File Parser. Such manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-31970. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More