← Back

CVE-2020-29367

nvd nist
Published: Nov 27, 2020Modified: Apr 25, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.

Affected (9)

Products: Blosc: C Blosc2
Blosc
1 product
C Blosc2
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Blosc
C Blosc2
Version 2.0.0 alpha2
C Blosc2
Version 2.0.0 alpha3
C Blosc2
Version 2.0.0 alpha4
C Blosc2
Version 2.0.0 alpha5
C Blosc2
Version 2.0.0 beta1
C Blosc2
Version 2.0.0 beta2
C Blosc2
Version 2.0.0 beta3
C Blosc2
Version 2.0.0 beta4
C Blosc2
Version 2.0.0 beta5

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.