Approved changes feed: RSS · Atom

cpe:2.3:a:samtools:samtools:1.23:*:*:*:*:*:*:*

part: a version: 1.23 update: *

VendorSamtools (9b5f2212-da2c-5e3f-bc0c-2e81319e4041)
ProductSamtools (15aa8c19-de2a-51c5-b275-a1de5b42dfb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samtools/samtools purl2cpe 2026-06-01 10:17:44.646337

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31973 vulnerable 2026-06-08 07:57:16.172791 NULL pointer dereference in samtools cram-size
SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in the cram-size command, used to write information about how well CRAM files are compressed, a check to see if the `cram_decode_compression_header()` was missing. If the function returned an error, this could lead to a NULL pointer dereference. Exploiting this bug causes a NULL pointer dereference. Typically this will cause the program to crash. Versions 1.23.1, 1.22.2 and 1.21.1 include fixes for this issue. There is no workaround for this issue.
Published: 2026-03-18T20:34:00.846Z
Updated: 2026-03-19T16:14:59.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.