Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function called while reading CRAM records, validation of the reference id field occurred too late, allowing two out of bounds reads to occur before the invalid data was detected. The bug does allow two values to be leaked to the caller, however as the function reports an error it may be difficult to exploit them. It is also possible that the program will crash due to trying to access invalid memory. Versions 1.23.1, 1.22.2 and 1.21.1 include fixes for this issue. There is no workaround for this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-31965 - HTSlib CRAM reader has out-of-bounds reads due to improper validation of input Intel Report: https://ift.tt/RbLVsnT
Post summary
A new CVE-2026-31965 was disclosed, identifying an out‑of‑bounds read flaw in HTSlib's CRAM reader caused by improper input validation, with no exploit, patch, or PoC referenced.
CVE-2026-31965 HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_sli… https://www.cve.org/CVERecord?id=CVE-2026-31965
Post summary
The passage merely references CVE‑2026‑31965 and mentions the affected library and file format without providing any exploitation, patch, or technical detail.
CVE-2026-31965 Out-of-Bounds Read Vulnerability in HTSlib CRAM Decoding Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31965
Post summary
The post announces CVE-2026-31965 as an out‑of‑bounds read flaw in HTSlib’s CRAM decoder, linking to a detail page yet offering no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | htslib | htslib | - | - | - |
| App | htslib | htslib | 1.23 | - | - |