Vendors / Blosc Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now Blosc records in CISA KEV No Blosc vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunks…
CVSS 4.0 MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00237 · Published 2026-11-05 · Fixed in 3.5.0 CWE-369
Priority MEDIUM 51
A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01275 · Published 2024-04-02 · No fix listed CWE-122
Priority MEDIUM 45
A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01359 · Published 2024-04-02 · No fix listed CWE-122
Priority MEDIUM 40
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2023-12-25 · No fix listed CWE-476
Priority LOW 36
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01201 · Published 2020-11-27 · Partial fix · 0.1.7 CWE-787
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2023-12-25 · No fix listed CWE-476
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2023-12-25 · No fix listed CWE-476
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2023-12-25 · No fix listed CWE-476
Priority LOW 28
A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-09-30 · Fixed in 3.3.3 CWE-189
Open these records in search → All records by CVSS severity
2 5 2 0 0
THREATIST.IORead the docs