Approved changes feed: RSS · Atom
cpe:2.3:a:zchunk:zchunk:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zchunk (9a0cee05-0487-5146-9f66-4f7b44c41b0a) |
|---|---|
| Product | Zchunk (c36bd63d-c3fe-598b-a510-f8dbf41245fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zchunk/zchunk |
purl2cpe | 2026-06-01 10:13:00.830574 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-117556 |
vulnerable | 2026-11-03 10:15:34.345863 |
zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()
MEDIUM (4.3)
zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.
Published: 2026-10-27T13:07:51.708Z
Updated: 2026-10-28T16:17:15.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46228 |
vulnerable | 2026-06-08 06:12:44.441710 |
Details available
zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-09-12T18:08:06.106Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.