Skip to main content
VulnerabilityPublished Updated

blosc_d · C Blosc2: Heap-buffer-overflow

Affects c-blosc2Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 17 Sep 2026, 22:33 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzc-blosc2pkg:generic/c-blosc2Other threatsAffected
  • >=4a727370b1c2e9746434c00bf2236db86c31ea5c
  • =v2.0.0
  • =v2.0.0-rc2
  • =v2.0.0.rc1
  • =v2.0.1
  • =v2.0.2
  • =v2.0.3
  • =v2.0.4
  • =v2.1.0
  • =v2.1.1
  • =v2.2.0
  • =v2.3.0
  • =v2.3.1
  • =v2.4.0
  • =v2.4.1
  • =v2.4.2
  • =v2.4.3
  • =v2.5.0
  • =v2.6.0
  • =v2.6.1
  • =v2.7.0
  • =v2.7.1
  • =v2.8.0
  • =v2.9.0
  • =v2.9.1
  • =v2.9.2
  • =v2.9.3
  • =v2.10.0
  • =v2.10.1
  • =v2.10.2
  • =v2.10.3
  • =v2.10.4
  • =v2.10.5
  • =v2.11.0
  • =v2.11.1
  • =v2.11.2
  • =v2.11.3
  • =v2.12.0
  • =v2.13.0
  • =v2.13.1
  • =v2.13.2
  • =v2.14.0
  • =v2.14.1
  • =v2.14.2
  • =v2.14.3
  • =v2.14.4
  • =v2.15.0
  • =v2.15.1
  • =v2.15.2
  • =v2.16.0
  • =v2.17.0
  • =v2.17.1
  • =v2.18.0
  • =v2.19.0
  • =v2.19.1
  • =v2.20.0
  • =v2.21.0
  • =v2.21.1
  • =v2.21.2
  • =v2.21.3
  • =v2.22.0
  • =v2.23.0
  • =v2.23.1
  • =v3.0.0.rc1
  • =v3.0.0.rc2
  • =v3.0.0
  • =v3.0.1
  • =v3.0.2
  • =v3.0.3
  • =v3.1.0
  • =v3.1.1
  • =v3.1.2
  • =v3.1.3
  • =v3.1.4
  • =v3.1.5
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor the c-blosc2 project and OSS-Fuzz reports for updates and apply patches once available.

Description

A heap-buffer-overflow vulnerability exists in the blosc_d function of the c-blosc2 compression library, as reported by OSS-Fuzz. This issue involves an out-of-bounds read of 4 bytes during decompression operations.

References

Community reviews

Loading reviews…