CVE-2018-13843: Htslib

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library (such as test/test_bgzf.c in the original report) and is not a library issue

Affected products

• Htslib Htslib: version 1.8 only

Published 2018-07-10. Last modified 2026-06-17.