Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2020-29367

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.

VectorLOCAL

PublishedNov 27, 2020, 20:15

Published Bycve@mitre.org

Base Score

Score7.8

Package (Ecosystem)IntroducedFixedLimit

blosc2(PyPI)00.1.7N/A

CWE-787

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL