Vulnerabilities

Filters

1 selected

21 records

Sort

Vendor: M2Team Clear all filters

TI-2026-39447 CVE-2026-54616

NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

MEDIUM 64

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00443 Published 2026-08-20 Fixed in 6.0.1698.0, 6.5.1742.0 CWE-125

TI-2026-40270 CVE-2026-55781

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

LOW 12

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00159 Published 2026-07-10 Fixed in 6.5.1749.0 CWE-400

TI-2026-40269 CVE-2026-55780

NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

MEDIUM 46

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.0056 Published 2026-07-10 Fixed in 6.5.1749.0 CWE-248

TI-2026-40272 CVE-2026-55783

NULL pointer dereference in M2Team NanaZip

MEDIUM 46

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00174 Published 2026-07-10 Fixed in 6.5.1749.0 CWE-476

TI-2026-40271 CVE-2026-55782

Uncontrolled resource consumption in M2Team NanaZip

MEDIUM 46

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00176 Published 2026-07-10 Fixed in 6.5.1749.0 CWE-400

TI-2026-34809 CVE-2026-47223

NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow

MEDIUM 58

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00222 Published 2026-06-12 Fixed in 6.0.1698.0 CWE-125

TI-2026-34810 CVE-2026-47224

NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check

LOW 19

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00187 Published 2026-06-12 Fixed in 6.0.1698.0 CWE-125

TI-2026-34808 CVE-2026-47222

NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow

MEDIUM 58

NanaZip is the 7-Zip derivative intended for the modern Windows experience.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0017 Published 2026-06-12 Fixed in 6.0.1698.0 CWE-125

TI-2026-32194 CVE-2026-44215

NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser

MEDIUM 64

NanaZip is an open source file archive.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-787

TI-2026-30734 CVE-2026-42445

NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-674

TI-2026-30733 CVE-2026-42444

NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount

MEDIUM 58

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-770

TI-2026-30732 CVE-2026-42443

NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00146 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-369

TI-2026-30731 CVE-2026-42442

NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00111 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-476

TI-2026-30657 CVE-2026-42355

NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion

LOW 24

NanaZip is an open source file archive.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00146 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-674

TI-2026-30735 CVE-2026-42446

NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser

LOW 30

NanaZip is an open source file archive.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00118 Published 2026-05-12 Fixed in 6.0.1698.0 CWE-125

TI-2026-22087 CVE-2026-27711

NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00169 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-125

TI-2026-22086 CVE-2026-27710

NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00153 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-191

TI-2026-22085 CVE-2026-27709

NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00171 Published 2026-02-25 Fixed in 6.0.1638.0, 6.5.1638.0 CWE-125

TI-2026-21566 CVE-2026-27114

NanaZip has ROMFS Archive Infinite Loop

MEDIUM 56

NanaZip is an open source file archive.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.0031 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-835

TI-2026-21488 CVE-2026-27014

NanZip has ROMFS Archive Infinite Loop / Stack Overflow

MEDIUM 56

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack o…

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00181 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-674

TI-2026-21251 CVE-2026-26282

NanaZip has DotNet Single file OOB Heap Read

MEDIUM 57

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check.

CVSS 4.0MEDIUM 5.2 Local Low privileges User interaction EPSS 0.00205 Published 2026-02-19 Fixed in 6.0.1630.0 CWE-126