CVE-2026-55780

creationtimestamp| type| source ---|---|--- 2026-07-10 23:12:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbkcyc4g26 2026-07-10 23:39:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd34wa7o27...

CVE-2026-55780 NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...