CVE details
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(), resulting in heap corruption or crashes in tools like samtools and bcftools.
- Score
- 4.8 medium
- Published
- 2026-10-26
- Links
- NVD · cve.org · Report wrong data
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| biology/htslib | htslib | 1.24_1 | unaddressed | ports@FreeBSD.org |
Template for a VuXML entry
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>htslib</name>
<range><lt>FIXME</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>HTSlib through 1.24 contains a heap out-of-bounds write and read
vulnerability in bgzf_index_load_hfile() in bgzf.c that allows
attackers to corrupt heap memory by supplying a crafted .gzi index
entry count. A count of 0xFFFFFFFF truncates noffs to zero, causing
writes past a malloc(0) buffer and an offs[-1] read in bgzf_useek(),
resulting in heap corruption or crashes in tools like samtools and
bcftools.</p>
</body>
</description>
<references>
<cvename>CVE-2026-116742</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2026-116742</url>
</references>
<dates>
<discovery>2026-10-26</discovery>
<entry>2026-10-27</entry>
</dates>
</vuln>