Blosc

Blosc maintains a small, focused compression library that sits within the data-processing pipelines of scientific computing and analytics applications, giving its vulnerabilities outsized potential impact across downstream consumers. The vendor's disclosures skew strongly toward critical-severity outcomes and concentrate in its C-Blosc2 product around memory-safety weakness classes including NULL-pointer dereferences, heap-based buffer overflows, and out-of-bounds writes, issues endemic to compression codecs that parse and manipulate binary data at scale. Defenders should prioritize this vendor's security updates for any system using embedded or bundled compression, since remediation often requires rebuilding dependent applications; live severity and exploitation figures are shown alongside this summary.