CB
Product
C-Blosc2
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add C-Blosc2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-29367 | 7.8 | Nov 27 | blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +3 more |
| CVE-2023-37188 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c Affected: before 2.9.3 |
| CVE-2023-37187 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress Affected: before 2.9.3 |
| CVE-2023-37185 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c Affected: before 2.9.3 |
| CVE-2023-37186 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset Affected: before 2.9.3 |
Showing 5