zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.
zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions.
CVSS 4.0MEDIUM 5.3·Network·No auth·User interaction·EPSS 0.00328·Published 2026-10-27·Fixed in 1.5.5CWE-125
