CVE-2020-36403 - HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read)

HIGH

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read)

Published Jul 1, 2021

8.8

HIGH

CVSS 3.1

EPSS 1.59%

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24097		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2020-955.yaml		x_refsource_MISCThird Party Advisory
https://github.com/samtools/htslib/commit/dcd4b7304941a8832fba2d0fc4c1e716e7a4e72c		x_refsource_MISCPatchThird Party Advisory
https://github.com/samtools/htslib/pull/1447		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 1, 2021

Updated Aug 4, 2024

Reserved Jul 1, 2021

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a