HTSlib 1.8
Approved changes feed: RSS · Atom
cpe:2.3:a:htslib:htslib:1.8:*:*:*:*:*:*:*part: a version: 1.8 update: *
| Vendor | Htslib (84ad351d-7e4d-589a-bdd2-844e64c351cd) |
|---|---|
| Product | Htslib (5db258ee-1c2e-5084-a7c2-c857de7e14a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/htslib |
purl2cpe | 2026-06-01 10:11:37.444802 |
pkg:deb/ubuntu/htslib |
purl2cpe | 2026-06-01 10:11:37.444804 |
pkg:github/samtools/htslib |
purl2cpe | 2026-06-01 10:11:37.444805 |
pkg:rpm/fedora/htslib |
purl2cpe | 2026-06-01 10:11:37.444806 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14329 |
vulnerable | 2026-06-08 05:10:52.772609 |
Details available
In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.
Published: 2018-07-17T02:00:00.000Z
Updated: 2024-08-05T09:21:41.621Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13845 |
vulnerable | 2026-06-08 05:10:52.015136 |
Details available
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
Published: 2018-07-10T18:00:00.000Z
Updated: 2024-08-05T09:14:47.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13844 |
vulnerable | 2026-06-08 05:10:52.014844 |
Details available
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own code
Published: 2018-07-10T18:00:00.000Z
Updated: 2024-08-05T09:14:47.302Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13843 |
vulnerable | 2026-06-08 05:10:52.014456 |
Details available
An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library (such as test/test_bgzf.c in the original report) and is not a library issue
Published: 2018-07-10T18:00:00.000Z
Updated: 2024-08-05T09:14:47.253Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.