Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HTSlib CRAM reader has out-of-bounds reads due to improper validation of input
Vulnerability Description
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function called while reading CRAM records, validation of the reference id field occurred too late, allowing two out of bounds reads to occur before the invalid data was detected. The bug does allow two values to be leaked to the caller, however as the function reports an error it may be difficult to exploit them. It is also possible that the program will crash due to trying to access invalid memory. Versions 1.23.1, 1.22.2 and 1.21.1 include fixes for this issue. There is no workaround for this issue.
CVSS Information
N/A
Vulnerability Type
跨界内存读
Vulnerability Title
HTSlib 输入验证错误漏洞
Vulnerability Description
HTSlib是samtools开源的一个C语言的库文件。 HTSlib 1.23.1之前版本、1.22.2之前版本和1.21.1之前版本存在输入验证错误漏洞，该漏洞源于cram_decode_slice函数中参考ID字段验证过晚，可能导致越界读取。
CVSS Information
N/A
Vulnerability Type
N/A