Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-122330 1 Blosc 1 C-blosc2 2026-11-05 5.5 Medium
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process.
CVE-2020-29367 1 Blosc 1 C-blosc2 2025-04-25 7.8 High
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.