What’s Vulnerable › Vulnerabilities

CVE-2020-29367

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-27 · updated 2026-06-17
• Weakness: CWE-787

Description

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.

Affected products

• c-blosc2: 2.0.0-alpha2, 2.0.0-alpha3, 2.0.0-alpha4, 2.0.0-alpha5, 2.0.0-beta1, 2.0.0-beta2 (+3)

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26442
• https://github.com/Blosc/c-blosc2/commit/c4c6470e88210afc95262c8b9fcc27e30ca043ee
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26442
• https://github.com/Blosc/c-blosc2/commit/c4c6470e88210afc95262c8b9fcc27e30ca043ee

Get alerted when CVE-2020-29367 or the next vulnerability affects your stack