Vulnerabilities

TI-2026-32194 CVE-2026-44215

NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser

MEDIUM 64

NanaZip is an open source file archive.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-787

TI-2026-30734 CVE-2026-42445

NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-674

TI-2026-30733 CVE-2026-42444

NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount

MEDIUM 58

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-770

TI-2026-30732 CVE-2026-42443

NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00146 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-369

TI-2026-30731 CVE-2026-42442

NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-476

TI-2026-30657 CVE-2026-42355

NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00146 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-674

TI-2026-30735 CVE-2026-42446

NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser

LOW 30

NanaZip is an open source file archive.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00118 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-125

TI-2026-22087 CVE-2026-27711

NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00169 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-125

TI-2026-22086 CVE-2026-27710

NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00153 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-191

TI-2026-22085 CVE-2026-27709

NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00171 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-125

TI-2026-21566 CVE-2026-27114

NanaZip has ROMFS Archive Infinite Loop

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.0031 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-835

TI-2026-21488 CVE-2026-27014

NanZip has ROMFS Archive Infinite Loop / Stack Overflow

MEDIUM 56

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack o…

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00181 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-674

TI-2026-21251 CVE-2026-26282

NanaZip has DotNet Single file OOB Heap Read

MEDIUM 57

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check.

CVSS 4.0MEDIUM 5.2 Local Low privileges User interaction EPSS 0.00205 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-126

Vulnerabilities

Filters