AZL-112694
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112694.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112694
- Upstream
- Published
- 2026-11-05T16:17:46Z
- Modified
- 2026-11-06T14:17:03Z
- Summary
- CVE-2026-122330 affecting package blosc 1.21.6-1
- Details
-
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process.
- References