A heap-buffer-overflow vulnerability exists in the cram_encode_container function of htslib. This issue was reported by OSS-Fuzz and involves reading beyond allocated heap memory during CRAM container encoding. Multiple versions of htslib from 1.21.1 through 1.25 are affected. Fixes have been committed to the codebase.