CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-28027
Critical (9.8) in bam project bam. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in bam 0.1.3.
An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-191
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bam_project:bam
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cpqj-r29q-chrh | crates.io | bam | <0.1.3 | 0.1.3 |
| RUSTSEC-2021-0027 | crates.io | bam | >=0.0.0-0 <0.1.3 | 0.1.3 |