ndlz8_decompress · C blosc2: Heap-buffer-overflow
Affects c-blosc2Source GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 17 Sep 2026, 22:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzc-blosc2pkg:generic/c-blosc2Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should monitor the c-blosc2 project and OSS-Fuzz reports for updates and apply any forthcoming patches promptly.
Description
A heap-buffer-overflow vulnerability exists in the ndlz8_decompress function of the c-blosc2 compression library. This issue was reported by OSS-Fuzz and involves an out-of-bounds read on the heap during decompression operations.
References
Community reviews
Loading reviews…