CVE-2017-1000206

9.8 criticalEPSS 2.2%

Critical (9.8) in htslib htslib. EPSS 2.2% chance of exploitation in the next 30 days.

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

htslib:htslib

References

https://github.com/samtools/htslib/blob/1.4.1/NEWS
https://github.com/samtools/htslib/blob/1.4.1/NEWS

Check your stack JSON