https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 07:07:44 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-116742 <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116742 https://db.gcve.eu/vuln/ghsa-r296-8jjg-794r <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> https://db.gcve.eu/vuln/ghsa-r296-8jjg-794r https://db.gcve.eu/vuln/ubuntu-cve-2026-116742 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: htslib, Ubuntu:Pro:16.04:LTS: htslib, Ubuntu:Pro:18.04:LTS: htslib, Ubuntu:20.04:LTS: htslib, Ubuntu:22.04:LTS: htslib, Ubuntu:24.04:LTS: htslib, Ubuntu:26.10: htslib, Ubuntu:26.04:LTS: htslib</p> <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: htslib, Ubuntu:Pro:16.04:LTS: htslib, Ubuntu:Pro:18.04:LTS: htslib, Ubuntu:20.04:LTS: htslib, Ubuntu:22.04:LTS: htslib, Ubuntu:24.04:LTS: htslib, Ubuntu:26.10: htslib, Ubuntu:26.04:LTS: htslib</p> <p>HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116742