Read the docs
TI-2026-65605 Aliases CVE-2026-103222GHSA-c776-5v2h-x5j5

Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow

Priority LOW 28CWE-189Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of the component blosclz Decompression. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. Upgrading to version 3.3.3 will fix this issue. This patch is called fe2964d114d97847f56570a0ab2be2c57ccbeedc. The affected component should be upgraded.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00278 20th percentileScored 2026-11-07
Fix Fixed C-Blosc2 (Blosc): 3.3.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BloscC-Blosc23.3.0; 3.3.1; 3.3.23.3.3Patch availableCNA
  • C-Blosc2 VendorBlosc Affected 3.3.0; 3.3.1; 3.3.2 Fixed in 3.3.3 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:blosc:c-blosc2:*:*:*:*:*:*:*:*——Blosc
  • cpe:2.3:a:blosc:c-blosc2:*:*:*:*:*:*:*:* Versions — — ·Blosc

Remediation

  • Fix · CNA C-Blosc2 (Blosc) Fixed in 3.3.3

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-103222
  2. 2026-10-03 Alias added: GHSA-c776-5v2h-x5j5
  3. 2026-11-06 Affected versions changed · Red Hat
  4. 2026-11-06 CVSS score added · Red Hat

References

Patch 2

Other 1

  • TI-2026-85475 Divide-by-zero in Blosc c-blosc2 lets crafted frames crash applications CVSS 4.0MEDIUM 6.8
  • TI-2024-03004 c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow CVSS 3.1CRITICAL 9.8
  • TI-2024-03003 c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow CVSS 3.1CRITICAL 9.8
  • TI-2023-18819 C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the… CVSS 3.1HIGH 7.5
  • TI-2020-17648 blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when… CVSS 3.1HIGH 7.8
  • TI-2023-18822 C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the… CVSS 3.1HIGH 7.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences