C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109484.json"