CVE-2025-29476

Publication date 4 April 2025

Last updated 11 July 2025

Ubuntu priority

Why this priority?

Cvss 3 Severity Score

Score breakdown

Description

Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
c-blosc2	25.10 questing	Needs evaluation
	25.04 plucky	Ignored end of life, was needs-triage
	24.10 oracular	Ignored end of life, was needs-triage
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Not in release
	20.04 LTS focal	Not in release

Severity score breakdown

Parameter	Value
Base score	5.5 · Medium
Attack vector	Network
Attack complexity	Low
Privileges required	Low
User interaction	Required
Scope	Unchanged
Confidentiality	Low
Integrity impact	Low
Availability impact	Low
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

References

Other references