CVE-2024-3203

CVE-2024-3203 is a critical heap-based buffer overflow vulnerability found in c-blosc2 versions up to 2.13.2, specifically within the ndlz8_decompress function. This flaw allows for remote exploitation, potentially leading to complete compromise of confidentiality, integrity, and availability. Rated with a CVSS score of 9.8 (Critical), it is easily exploitable over a network with low attack complexity and no user interaction required. While public exploit code has been disclosed, there is currently no evidence of active exploitation, no Metasploit or Nuclei modules, and minimal community discussion or media coverage.