CVE-2023-37185 | C-Blosc2 up to 2.9.2 zfp/blosc2-zfp.c zfp_prec_decompress null pointer dereference (Issue 519)

A vulnerability was found in C-Blosc2 up to 2.9.2. It has been declared as problematic. Affected by this vulnerability is the function zfp_prec_decompress of the file zfp/blosc2-zfp.c. The manipulation leads to null pointer dereference.

This vulnerability is known as CVE-2023-37185. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.