CVE-2023-46228: Zchunk

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.

Affected products

• Zchunk Zchunk: before 1.3.2 (fixed in 1.3.2)

Published 2023-10-19. Last modified 2026-06-17.