CVE-2026-54616

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...

CVE-2026-54616 NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2025-54616

creationtimestamp| type| source ---|---|--- 2025-08-06 01:52:30+00:00| seen| Telegram/EDV7L7IMXxw8NNuhNKkMUIQp0JfEZcyTTcDvJ7fm88lwyE...

CVE-2025-54616

CVE-2025-54616 affects Huawei HarmonyOS ArkUI Framework with an out-of-bounds array access in ArkUI. CVSS data indicates local, low-privilege, no-user-interaction access leading to availability impact; exploitation details are not provided in the documents. Connected sources mention Huawei Harmon...

CVE-2025-54616

Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability...