inflate · C Blosc2: Heap-buffer-overflow
Affects c-blosc2Source GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 17 Sep 2026, 22:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzc-blosc2pkg:generic/c-blosc2Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until a fix is available, users should consider avoiding processing untrusted data with affected versions of c-blosc2 or apply any available updates from the vendor.
Description
A heap-buffer-overflow vulnerability exists in the inflate function of the c-blosc2 compression library. This issue was identified through an OSS-Fuzz report and involves a read overflow during decompression operations. Multiple versions of c-blosc2 are affected. No CVSS score is provided, but the severity is assessed as medium based on the available information.
References
Community reviews
Loading reviews…