CVE-2026-31966 | samtools htslib up to 1.21.0/1.22.1/1.23 cram_decode_seq out-of-bounds

A vulnerability described as problematic has been identified in samtools htslib up to 1.21.0/1.22.1/1.23. This issue affects the function cram_decode_seq. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-31966. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.