CVE-2023-46228
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 19, 2023
Updated: Oct 25, 2023
CWE ID 190
Summary
CVE-2023-46228 is a vulnerability affecting zchunk before version 1.3.2. Maliciously crafted zchunk files can cause integer overflows in the comp.c, zstd.c, multipart.c, and header.c components of zchunk, potentially leading to arbitrary code execution or memory corruption. Exploitation of this vulnerability could result in serious consequences, including data breaches or system crashes. Users are strongly advised to update their zchunk installations to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.