CVE-2023-37187 | C-Blosc2 up to 2.9.2 zfp/blosc2-zfp.c zfp_acc_decompress null pointer dereference (Issue 520)

A vulnerability classified as problematic was found in C-Blosc2 up to 2.9.2. Affected by this vulnerability is the function zfp_acc_decompress of the file zfp/blosc2-zfp.c. The manipulation leads to null pointer dereference.

This vulnerability is known as CVE-2023-37187. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.