Vulnerabilities (CVE)

Filtered by vendor C-blosc2 Project Subscribe
Filtered by product C-blosc2
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-37188 1 C-blosc2 Project 1 C-blosc2 2023-12-29 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
CVE-2023-37187 1 C-blosc2 Project 1 C-blosc2 2023-12-29 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
CVE-2023-37186 1 C-blosc2 Project 1 C-blosc2 2023-12-29 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
CVE-2023-37185 1 C-blosc2 Project 1 C-blosc2 2023-12-29 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
CVE-2020-29367 1 C-blosc2 Project 1 C-blosc2 2023-12-10 9.3 HIGH 7.8 HIGH
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.