An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
htslib htslib 1.8