Skip to main content
VulnerabilityPublished Updated

C blosc2: Heap-buffer-overflow

Affects c-blosc2Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 17 Sep 2026, 22:33 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzc-blosc2pkg:generic/c-blosc2Other threatsAffected
  • v2.0.0 – v3.1.5
  • >=1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4
72 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor the c-blosc2 project and OSS-Fuzz reports for updates and apply any forthcoming patches promptly.

Description

A heap-buffer-overflow vulnerability exists in the ndlz8_decompress function of the c-blosc2 compression library. This issue was reported by OSS-Fuzz and involves an out-of-bounds read on the heap during decompression operations.

References

Community reviews

Loading reviews…