CVE-2023-37185

Vulnerability summary: CVE-2023-37185 affects Blosc C-Blosc2 prior to 2.9.3, due to a NULL pointer dereference in the function zfp_prec_decompress (zfp/blosc2-zfp.c). The issue is triggered in zfp_prec_decompress and may lead to crashes or memory access problems. Affected software: c-blosc2 up to...

CVE-2023-37187

CVE-2023-37187 affects c-blosc2 before 2.9.3. The root cause is a NULL pointer dereference in zfp_acc_decompress (zfp/blosc2-zfp.c). This can cause crashes (potential availability impact) and is documented across NVD/Red Hat/CVE records. Remediation: upgrade to version 2.9.3 or later; as a tempor...

CVE-2023-37186

CVE-2023-37186 affects C-Blosc2, specifically versions prior to 2.9.3. The issue is a NULL pointer dereference in ndlz/ndlz8x8.c triggered by a NULL pointer passed to memset. This vulnerability can lead to a crash or denial of service, with CVSS 3.1 base score 7.5 (HIGH). The connected documents ...

CVE-2023-37188

CVE-2023-37188 affects Blosc2 prior to 2.9.3. The vulnerability is a NULL pointer dereference in zfp_rate_decompress within zfp/blosc2-zfp.c. Public sources consistently describe the flaw as a crash-inducing null dereference; no exploitation details are provided in the supplied documents. Impact ...