c-blosc2 vulnerabilities
CVEs whose affected-version data names the c-blosc2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-122330Medium· 5.5PoCBlosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize …
▾ TwilightBlosc · c-blosc2EPSS 0.24%via CVEORG
CVE-2026-103222Medium· 5.6A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2
A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of the component blosclz Decompression. Executing a manipulation can lead to integer overflow. The att…
▾ SunlitBlosc · C-Blosc2EPSS 0.28%via NVD