C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109481.json"