CVE-2023-37186: Null Pointer Dereference
Published Dec 25, 2023
·Updated
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
Affected Software
1 affected component
blosc C-Blosc2<2.9.3
Remediation
Event History
Dec 25, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-37186?
The severity of CVE-2023-37186 is classified as a medium risk due to the potential for NULL pointer dereference leading to application crashes.
2
How do I fix CVE-2023-37186?
To fix CVE-2023-37186, upgrade C-blosc2 to version 2.9.3 or later where the issue has been resolved.
3
What types of systems are affected by CVE-2023-37186?
CVE-2023-37186 affects C-blosc2 versions prior to 2.9.3 used in various applications across multiple platforms.
4
What causes the vulnerability in CVE-2023-37186?
The vulnerability in CVE-2023-37186 is caused by a NULL pointer dereference in the ndlz/ndlz8x8.c component during a memset operation.
5
Is CVE-2023-37186 a locally or remotely exploitable vulnerability?
CVE-2023-37186 is considered a locally exploitable vulnerability as it requires access to the affected software environment.