CyberSecBulletin

C-blosc2 vulnerabilities

We track 2 vulnerabilities in C-blosc2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest C-blosc2 vulnerabilities

  • 9.8 Critical severity

    c-blosc2: Heap-based Buffer Overflow

    CVE-2024-3204C-blosc2EPSS 1.27%

    A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. The manipulation leads to heap-based buffer overflow. T

  • 9.8 Critical severity

    c-blosc2: Heap-based Buffer Overflow

    CVE-2024-3203C-blosc2EPSS 1.36%

    A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow. It is possible to la