M2team

Nanazip

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.6

CVE-2026-27711

Exploit
  • EPSS 0.02%
  • Veröffentlicht 25.02.2026 23:44:26
  • Zuletzt bearbeitet 27.02.2026 17:51:29

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a memory corruption vulnerability in NanaZip’s UFS parser allows a crafted `.ufs/.ufs2/.img` file to trigger out-of-bounds memory ...

5

CVE-2026-27710

Exploit
  • EPSS 0.01%
  • Veröffentlicht 25.02.2026 23:43:28
  • Zuletzt bearbeitet 27.02.2026 17:53:13

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s `.NET Single File Application` parser. A crafted bundle can force an integer...

6.6

CVE-2026-27709

Exploit
  • EPSS 0.01%
  • Veröffentlicht 25.02.2026 23:39:03
  • Zuletzt bearbeitet 27.02.2026 17:54:12

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s `.NET Single File Application` parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can ...

7.5

CVE-2026-27114

Exploit
  • EPSS 0.03%
  • Veröffentlicht 19.02.2026 21:18:32
  • Zuletzt bearbeitet 26.02.2026 00:16:23

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.

5.5

CVE-2026-27014

Exploit
  • EPSS 0.01%
  • Veröffentlicht 19.02.2026 20:45:07
  • Zuletzt bearbeitet 20.02.2026 19:27:51

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive ...

6.6

CVE-2026-26282

Exploit
  • EPSS 0.02%
  • Veröffentlicht 19.02.2026 20:41:49
  • Zuletzt bearbeitet 20.02.2026 19:42:56

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check. Opening a crafted file with NanaZip ...