CVE-2023-37186
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Dec 25, 2023
Updated: Dec 29, 2023
CWE ID 476
Summary
CVE-2023-37186 is a newly disclosed vulnerability affecting C-blosc2 before version 2.9.3. The issue involves a NULL pointer dereference in the file "ndlz/ndlz8x8.c". This defect arises when the software encounters a NULL pointer during a memset operation. Successful exploitation of this vulnerability could lead to arbitrary code execution or a denial-of-service condition. It is recommended that users of C-blosc2 upgrade to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- C-blosc2 Project C-blosc2