C blosc2: Heap-buffer-overflow
Affects c-blosc2Source GCVE Database
0
Severity
HighRated by Threat Radar
Data as of 12 Sep 2026, 22:01 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzc-blosc2pkg:generic/c-blosc2Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should monitor the c-blosc2 project or OSS-Fuzz reports for updates and apply any forthcoming patches promptly.
Description
A heap-buffer-overflow vulnerability exists in the c-blosc2 library within the ZSTD_decompressMultiFrame function. This issue was identified by OSS-Fuzz and involves an out-of-bounds read during decompression operations.
References
Community reviews
Loading reviews…