CVE-2023-37185

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfpprecdecompress at zfp/blosc2-zfp.c...

CVE-2023-37186

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset...

CVE-2023-37188

CVE-2023-37188 affects Blosc2 prior to 2.9.3. The vulnerability is a NULL pointer dereference in zfp_rate_decompress within zfp/blosc2-zfp.c. Public sources consistently describe the flaw as a crash-inducing null dereference; no exploitation details are provided in the supplied documents. Impact ...

PT-2023-25823 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: C-blosc2 versions prior to 2.9.3 Description: The issue is related to a NULL pointer dereference in the zfp acc decompress function, located in the zfp/blosc2-zfp.c file. This indicates a problem where the software attempts to access memory...

CVE-2023-37187

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfpaccdecompress. function...

CVE-2023-37188

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfpratedecompress at zfp/blosc2-zfp.c...

CVE-2023-37188

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfpratedecompress at zfp/blosc2-zfp.c...

CVE-2023-37185

Vulnerability summary: CVE-2023-37185 affects Blosc C-Blosc2 prior to 2.9.3, due to a NULL pointer dereference in the function zfp_prec_decompress (zfp/blosc2-zfp.c). The issue is triggered in zfp_prec_decompress and may lead to crashes or memory access problems. Affected software: c-blosc2 up to...

CVE-2023-37187

CVE-2023-37187 affects c-blosc2 before 2.9.3. The root cause is a NULL pointer dereference in zfp_acc_decompress (zfp/blosc2-zfp.c). This can cause crashes (potential availability impact) and is documented across NVD/Red Hat/CVE records. Remediation: upgrade to version 2.9.3 or later; as a tempor...

Blosc C-Blosc2 Security Vulnerability

Blosc C-Blosc2 is a code library from the Blosc team that enables deep compression of binary data. The goal of the software is to reduce the size of large datasets on disk or in memory, to speed up memory-bound computations, and to support BloscLZ, a compression program based on FastLZ, LZ4 and...

CVE-2023-37187

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfpaccdecompress. function...

CVE-2023-37186

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset...

SUSE CVE-2020-29367

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data...

PT-2023-35883 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ crash has been identified, involving the ZSTD freeDDict, blosc2 free ctx, and blosc2 schunk free functions. Recommendations: A...

PT-2022-36803 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash has been reported, involving the ZSTD createDDict, blosc run decompression with context, and blosc2 decompress ctx...

PT-2022-37215 · Blosc2 · Blosc2

Name of the Vulnerable Software and Affected Versions: blosc2 affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the do job function, blosc compress context, and blosc2 compress. Recommendations: At the...

PT-2022-37201 · Blosc2 · Blosc2

Name of the Vulnerable Software and Affected Versions: blosc2 affected versions not specified Description: The issue is related to a heap-buffer-overflow write error. Technical details about the crash include the do job function, blosc compress context, and blosc2 compress ctx. Recommendations: A...

GHSA-8C7C-2C8J-3XFP blosc2 heap-based buffer overflow

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data...

blosc2 heap-based buffer overflow

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data...

OSV-2021-640 Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33251 Crash type: Heap-buffer-overflow READ 6 Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...