CVE-2023-37185

Summary

CVE-2023-37185 is a newly identified vulnerability affecting C-blosc2 versions prior to 2.9.3. This issue involves a NULL pointer dereference in the zfp_prec_decompress function located at zfd/blosc2-zfp.c. An attacker can exploit this flaw by manipulating input data, leading to unintended memory access and potential code execution. This can result in serious consequences, including data corruption, unauthorized access, or system crashes. Users are strongly advised to update to the latest version of C-blosc2 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.