{
  "cveId": "CVE-2024-3203",
  "url": "https://patchblox.com/security/cve/CVE-2024-3203",
  "summary": "CVE-2024-3203 is fixed in c-blosc2 on 1 platform, first by DEBIAN-CVE-2024-3203, released April 2, 2024. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "c-blosc2: A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2",
  "description": "A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.14.3 is able to address this issue. It is recommended to upgrade the affected component. VDB-259050 is the identifier assigned to this vulnerability.",
  "published": "2024-04-02T22:15:10Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.01359,
  "epssPercentile": 0.71874,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "c-blosc2",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.13.1\u002Bds-3",
      "fix": "DEBIAN-CVE-2024-3203",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-3203",
      "released": "2024-04-02T22:15:10Z"
    },
    {
      "platform": "linux",
      "product": "c-blosc2",
      "release": "Debian 14",
      "fixedVersion": "2.13.1\u002Bds-3",
      "fix": "DEBIAN-CVE-2024-3203",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-3203",
      "released": "2024-04-02T22:15:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}