PatchTheCVE: c-blosc2https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-3204: A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as criticalhttps://patchthecve.com/cve/CVE-2024-3204.htmlhttps://patchthecve.com/cve/CVE-2024-3204.htmlWed, 17 Jun 2026 07:43:31 +0000HIGH 7.3: A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The CVE-2024-3203: A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2https://patchthecve.com/cve/CVE-2024-3203.htmlhttps://patchthecve.com/cve/CVE-2024-3203.htmlWed, 17 Jun 2026 07:43:31 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit haCVE-2023-37188: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompreshttps://patchthecve.com/cve/CVE-2023-37188.htmlhttps://patchthecve.com/cve/CVE-2023-37188.htmlWed, 17 Jun 2026 06:07:41 +0000HIGH 7.5: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.CVE-2023-37187: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_dehttps://patchthecve.com/cve/CVE-2023-37187.htmlhttps://patchthecve.com/cve/CVE-2023-37187.htmlWed, 17 Jun 2026 06:07:41 +0000HIGH 7.5: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.CVE-2023-37186: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointehttps://patchthecve.com/cve/CVE-2023-37186.htmlhttps://patchthecve.com/cve/CVE-2023-37186.htmlWed, 17 Jun 2026 06:07:41 +0000HIGH 7.5: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.CVE-2023-37185: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompreshttps://patchthecve.com/cve/CVE-2023-37185.htmlhttps://patchthecve.com/cve/CVE-2023-37185.htmlWed, 17 Jun 2026 06:07:40 +0000HIGH 7.5: C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.