Is CVE-2026-31969 actively exploited?

No active exploitation of CVE-2026-31969 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-31969 be exploited remotely?

Yes. CVE-2026-31969 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-31969?

CVE-2026-31969 has a CVSS score of 8.1 (HIGH).

HOME VULNERABILITIESCVE-2026-31969

HIGH

CVE-2026-31969

CWE-122Published: March 18, 2026· Updated: Mar 19, 2026

8.1

CVSS v3.1

EPSS:0.04%probability of exploitation in 30 daysPercentile:13.4th

Official Description

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the `BYTE_ARRAY_STOP` method, an out-by-one error in the `cram_byte_array_stop_decode_char()` function check for a full output buffer could result in a single attacker-controlled byte being written beyond the end of a heap allocation. Exploiting this bug causes a heap buffer overflow. If a user opens a file crafted to exploit this issue, it could lead to the program crashing, or overwriting of data and heap structures in ways not expected by the program. It may be possible to use this to obtain arbitrary code execution. Versions 1.23.1, 1.22.2 and 1.21.1 include fixes for this issue. There is no workaround for this issue.

NVD Source

Technical Analysis

CVE-2026-31969 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.1.