https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 16:37:54 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-117556 <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> https://db.gcve.eu/vuln/fkie_cve-2026-117556 https://db.gcve.eu/vuln/ghsa-xcf7-q4j8-4wvv <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> https://db.gcve.eu/vuln/ghsa-xcf7-q4j8-4wvv https://db.gcve.eu/vuln/msrc_cve-2026-117556 msrc_CVE-2026-117556 https://db.gcve.eu/vuln/msrc_cve-2026-117556 https://db.gcve.eu/vuln/ubuntu-cve-2026-117556 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: zchunk, Ubuntu:24.04:LTS: zchunk, Ubuntu:26.10: zchunk, Ubuntu:26.04:LTS: zchunk</p> <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: zchunk, Ubuntu:24.04:LTS: zchunk, Ubuntu:26.10: zchunk, Ubuntu:26.04:LTS: zchunk</p> <p>zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap header buffer and crashing the application.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-117556