CVE-2023-37188

Summary

CVE-2023-37188 is a newly disclosed vulnerability affecting C-blosc2 versions prior to 2.9.3. This issue results in a NULL pointer dereference within the zfp_rate_decompress function located in zfp/blosc2-zfp.c. Successful exploitation of this vulnerability could lead to arbitrary code execution or application crashes, potentially resulting in significant security risks for affected systems. Users are strongly urged to upgrade to the latest version of C-blosc2 to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.