HTSlib Out-of-Bounds Read Vulnerability in CRAM Reader

A vulnerability in HTSlib's CRAM decoding function can lead to out-of-bounds reads. This issue arises because the mate reference ID field is not properly validated, allowing for potential array read errors when converting to SAM format. If the erroneous array value happens to be a valid pointer, it could be misinterpreted as a string, leading to unauthorized data writes in the SAM record. Such mismanagement may cause program crashes or unintentional information leaks. The vulnerability affects HTSlib versions through 1.21, 1.22, 1.22.1, and 1.23, with the issue resolved in versions 1.21.1, 1.22.2, and 1.23.1.

Impact

Exploitation of this vulnerability can cause out-of-bounds memory access, potentially leading to program crashes or unauthorized information leaks.