A heap-buffer-overflow vulnerability exists in the inflate function of the c-blosc2 compression library. This issue was identified through an OSS-Fuzz report and involves a read overflow during decompression operations. Multiple versions of c-blosc2 are affected. No CVSS score is provided, but the severity is assessed as medium based on the available information.