Blosc

8 CVEs across 1 Blosc products. Browse Blosc vulnerabilities, severities, and proof-of-concept exploits.

Blosc products with known CVEs

ProductCVEs
C-Blosc28
Blosc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-103222Medium5.62026-09-30A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of the component blosclz…
CVE-2024-3204High7.32024-04-02A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4_decompress of the file…
CVE-2024-3203High7.32024-04-02A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plug…
CVE-2023-37188High7.52023-12-25C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
CVE-2023-37187High7.52023-12-25C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
CVE-2023-37186High7.52023-12-25C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
CVE-2023-37185High7.52023-12-25C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
CVE-2020-29367High7.82020-11-27blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.