VendorsBloscc-blosc2any version
Vulnerabilities

Blosc C-Blosc2 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-3203
c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow
Published 2024-04-02 · Analyzed
9.8EPSS 0.013
CVE-2024-3204
c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow
Published 2024-04-02 · Analyzed
9.8EPSS 0.013
CVE-2023-37185
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
Published 2023-12-25 · Modified
7.5EPSS 0.008
CVE-2023-37186
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
Published 2023-12-25 · Modified
7.5EPSS 0.008
CVE-2023-37187
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
Published 2023-12-25 · Modified
7.5EPSS 0.008
CVE-2023-37188
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
Published 2023-12-25 · Modified
7.5EPSS 0.008