A vulnerability, which was classified as problematic, was found in C-Blosc2 up to 2.9.2. This affects the function zfp_rate_decompress of the file zfp/blosc2-zfp.c. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2023-37188. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.