CVE-2025-29476

medium

Description

Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before.

References

https://github.com/lmarch2/poc/blob/main/c-blosk2/c-blosk2.md

https://github.com/Blosc/c-blosc2/issues/656

Details

Source: Mitre, NVD

Published: 2025-04-04

Updated: 2025-04-07

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Severity: Medium

EPSS

EPSS: 0.00018

Detections

Analytics