Analysis and contextual insights are available on OpenCVE Cloud.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 05 Nov 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process. | |
| Title | Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer() | |
| First Time appeared |
Blosc
Blosc c-blosc2 |
|
| Weaknesses | CWE-369 | |
| CPEs | cpe:2.3:a:blosc:c-blosc2:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Blosc
Blosc c-blosc2 |
|
| References |
|
|
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-11-05T15:11:48.557Z
Reserved: 2026-11-04T23:26:08.935Z
Link: CVE-2026-122330
No data.
No data.
No data.
OpenCVE Enrichment
No data.
-
CWE-369
Divide By Zero