Skip to content
Noroxi

Blosc records

7 published records for vendor blosc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
42.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2024-3203
    39Monitor

    c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow

    CriticalCVSS 9.8No exploitEPSS 1%

    blosc · c-blosc2Apr 2, 2024

  • CVE-2024-3204
    39Monitor

    c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow

    CriticalCVSS 9.8No exploitEPSS 1%

    blosc · c-blosc2Apr 2, 2024

  • CVE-2020-29367
    31Monitor

    blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.

    HighCVSS 7.8No exploitEPSS 1%

    blosc · c-blosc2Nov 27, 2020

  • CVE-2023-37188
    30Monitor

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.

    HighCVSS 7.5No exploitEPSS 1%

    blosc · c-blosc2Dec 25, 2023

  • CVE-2023-37187
    30Monitor

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress.

    HighCVSS 7.5No exploitEPSS 1%

    blosc · c-blosc2Dec 25, 2023

  • CVE-2023-37185
    30Monitor

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.

    HighCVSS 7.5No exploitEPSS 1%

    blosc · c-blosc2Dec 25, 2023

  • CVE-2023-37186
    30Monitor

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.

    HighCVSS 7.5No exploitEPSS 1%

    blosc · c-blosc2Dec 25, 2023