Vulnerabilities > CVE-2023-37188 - NULL Pointer Dereference vulnerability in C-Blosc2 Project C-Blosc2

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2023-12-25

Updated: 2023-12-29

Summary

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.

Part	Description	Count
Application	C-Blosc2_Project C Blosc2 Project C Blosc2 2.0.0 C Blosc2 Project C Blosc2 2.1.0 C Blosc2 Project C Blosc2 2.1.1 C Blosc2 Project C Blosc2 2.2.0 C Blosc2 Project C Blosc2 2.3.0 C Blosc2 Project C Blosc2 2.3.1 C Blosc2 Project C Blosc2 2.4.0 C Blosc2 Project C Blosc2 2.4.1 C Blosc2 Project C Blosc2 2.4.2 C Blosc2 Project C Blosc2 2.4.3 C Blosc2 Project C Blosc2 2.5.0 C Blosc2 Project C Blosc2 2.6.0 C Blosc2 Project C Blosc2 2.6.1 C Blosc2 Project C Blosc2 2.7.0 C Blosc2 Project C Blosc2 2.7.1 C Blosc2 Project C Blosc2 2.8.0 C Blosc2 Project C Blosc2 2.9.0 C Blosc2 Project C Blosc2 2.9.1 C Blosc2 Project C Blosc2 2.9.2	27