-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe GitHub commit diff shows critical changes in blosc_c() where 'maxbytes' was replaced with 'destsize' in buffer overflow checks (lines 785 and 863). This aligns with the CVE description of a heap overflow due to insufficient space validation. The function's role in compression logic and direct modification in the security patch confirm its vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| blosc2 | pip | < 0.1.7 | 0.1.7 |