CVE-2026-122330

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-122330", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-04T23:26:08.935Z", "datePublished": "2026-11-05T15:11:48.557Z", "dateUpdated": "2026-11-05T20:42:34.933Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-05T15:11:48.557Z"}, "datePublic": "2026-11-01T00:00:00.000Z", "title": "Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()", "descriptions": [{"lang": "en", "value": "Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Divide By Zero", "cweId": "CWE-369", "type": "CWE"}]}], "affected": [{"vendor": "Blosc", "product": "c-blosc2", "defaultStatus": "unaffected", "versions": [{"version": "0", "lessThan": "3.5.0", "status": "affected", "versionType": "semver"}], "packageURL": "pkg:github/Blosc/c-blosc2", "repo": "https://github.com/Blosc/c-blosc2"}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:blosc:c-blosc2:*:*:*:*:*:*:*:*", "versionEndExcluding": "3.5.0"}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "references": [{"url": "https://github.com/Blosc/c-blosc2/issues/834", "tags": ["issue-tracking"]}, {"url": "https://github.com/Blosc/c-blosc2/commit/4fff1787408d94b895c6f9cb50f7925ad5919052", "tags": ["patch"]}, {"url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/schunk.c#L1662-L1700", "tags": ["technical-description"]}, {"url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/frame.c#L1214-L1227", "tags": ["technical-description"]}, {"url": "https://hackmd.io/@haindpwn/c-blosc2-schunk-slice-divide-by-zero", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Blosc/c-blosc2", "tags": ["product"]}, {"name": "VulnCheck Advisory: Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/blosc-c-blosc2-before-3.5.0-divide-by-zero-via-blosc2-schunk-get-slice-buffer"}], "credits": [{"lang": "en", "value": "HaiND from the Post and Telecommunication Institute of Technology", "type": "finder"}, {"lang": "en", "value": "Francesc Alted", "type": "remediation developer"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"references": [{"url": "https://hackmd.io/@haindpwn/cve-2026-122330-c-blosc2-schunk-slice-divide-by-zero", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-05T20:42:11.695290Z", "id": "CVE-2026-122330", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T20:42:34.933Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-122330", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-05T20:42:11.695290Z"}}}], "references": [{"url": "https://hackmd.io/@haindpwn/cve-2026-122330-c-blosc2-schunk-slice-divide-by-zero", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T20:42:29.894Z"}}], "cna": {"title": "Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()", "credits": [{"lang": "en", "type": "finder", "value": "HaiND from the Post and Telecommunication Institute of Technology"}, {"lang": "en", "type": "remediation developer", "value": "Francesc Alted"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6.8, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"repo": "https://github.com/Blosc/c-blosc2", "vendor": "Blosc", "product": "c-blosc2", "versions": [{"status": "affected", "version": "0", "lessThan": "3.5.0", "versionType": "semver"}], "packageURL": "pkg:github/Blosc/c-blosc2", "defaultStatus": "unaffected"}], "datePublic": "2026-11-01T00:00:00.000Z", "references": [{"url": "https://github.com/Blosc/c-blosc2/issues/834", "tags": ["issue-tracking"]}, {"url": "https://github.com/Blosc/c-blosc2/commit/4fff1787408d94b895c6f9cb50f7925ad5919052", "tags": ["patch"]}, {"url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/schunk.c#L1662-L1700", "tags": ["technical-description"]}, {"url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/frame.c#L1214-L1227", "tags": ["technical-description"]}, {"url": "https://hackmd.io/@haindpwn/c-blosc2-schunk-slice-divide-by-zero", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Blosc/c-blosc2", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/blosc-c-blosc2-before-3.5.0-divide-by-zero-via-blosc2-schunk-get-slice-buffer", "name": "VulnCheck Advisory: Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-369", "description": "Divide By Zero"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:blosc:c-blosc2:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "3.5.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-05T15:11:48.557Z"}}}, "cveMetadata": {"cveId": "CVE-2026-122330", "state": "PUBLISHED", "dateUpdated": "2026-11-05T20:42:34.933Z", "dateReserved": "2026-11-04T23:26:08.935Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-11-05T15:11:48.557Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:github/Blosc/c-blosc2", "product": "c-blosc2", "repo": "https://github.com/Blosc/c-blosc2", "vendor": "Blosc", "versions": [{"lessThan": "3.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious Blosc2 frame opened via blosc2_schunk_open() or blosc2_schunk_from_buffer() and read as a slice, raising SIGFPE and terminating the process."}], "id": "CVE-2026-122330", "lastModified": "2026-11-12T21:30:23.870", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-122330", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-05T20:42:11.695290Z", "version": "2.0.3"}}]}, "published": "2026-11-05T16:17:46.197", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/Blosc/c-blosc2"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/frame.c#L1214-L1227"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/schunk.c#L1662-L1700"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/Blosc/c-blosc2/commit/4fff1787408d94b895c6f9cb50f7925ad5919052"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/Blosc/c-blosc2/issues/834"}, {"source": "disclosure@vulncheck.com", "url": "https://hackmd.io/@haindpwn/c-blosc2-schunk-slice-divide-by-zero"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/blosc-c-blosc2-before-3.5.0-divide-by-zero-via-blosc2-schunk-get-slice-buffer"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://hackmd.io/@haindpwn/cve-2026-122330-c-blosc2-schunk-slice-divide-by-zero"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "c-blosc2: c-blosc2: Denial of Service via divide-by-zero in slice processing", "id": "2567901", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567901"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-369", "details": ["A flaw was found in c-blosc2. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted compressed data frame containing zero chunk or block size values. When an application attempts to read a data slice from the malicious frame, an unhandled division-by-zero error triggers an abnormal process crash."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-122330", "public_date": "2026-11-05T15:11:48Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-122330\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-122330\nhttps://github.com/Blosc/c-blosc2\nhttps://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/frame.c#L1214-L1227\nhttps://github.com/Blosc/c-blosc2/blob/v3.4.1/blosc/schunk.c#L1662-L1700\nhttps://github.com/Blosc/c-blosc2/commit/4fff1787408d94b895c6f9cb50f7925ad5919052\nhttps://github.com/Blosc/c-blosc2/issues/834\nhttps://hackmd.io/@haindpwn/c-blosc2-schunk-slice-divide-by-zero\nhttps://hackmd.io/@haindpwn/cve-2026-122330-c-blosc2-schunk-slice-divide-by-zero\nhttps://www.vulncheck.com/advisories/blosc-c-blosc2-before-3.5.0-divide-by-zero-via-blosc2-schunk-get-slice-buffer"], "statement": "This vulnerability is rated as Moderate severity because successful exploitation requires user interaction to load untrusted data and is constrained to an application crash, posing no threat to data confidentiality or integrity. Applications utilizing the c-blosc2 library are susceptible to termination via an arithmetic exception when attempting to parse specifically malformed compressed data slices. Because the defect does not permit remote code execution or privilege escalation, the overall operational risk remains contained to local availability.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.5.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "c-blosc2", "source": "cna", "vendor": "Blosc"}, "product": "c-blosc2", "vendor": "blosc"}], "created": "2026-11-05T16:45:06.032245+00:00", "updated": "2026-11-05T16:45:06.275317+00:00", "vendors": ["blosc", "blosc$PRODUCT$c-blosc2"]}