TI-2024-03004 CVE-2024-3204 · GHSA-c52r-8hmj-x4qg
c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow
Priority MEDIUM 51
A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical.
Blosc
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Blosc records in CISA KEVNo Blosc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in C-blosc2 · all components
TI-2024-03003 CVE-2024-3203 · GHSA-pf5m-h35j-7c4j
c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow
Priority MEDIUM 45
A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2.
TI-2023-18819 CVE-2023-37185 · GHSA-8cxx-7fx3-j6xj
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the…
Priority MEDIUM 40
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
TI-2020-17648 CVE-2020-29367 · GHSA-8c7c-2c8j-3xfp
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when…
Priority LOW 36
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.
TI-2023-18822 CVE-2023-37188 · GHSA-45pw-h44c-jmqc
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the…
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
TI-2023-18821 CVE-2023-37187 · GHSA-g4qh-pgmq-g946
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the…
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress.
TI-2023-18820 CVE-2023-37186 · GHSA-7vjq-m92p-42wp
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in…
Priority LOW 34
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.