SquashFS Component Disclosure DoS

The vulnerability of the Lz4Decode function in the NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp component of the SquashFS compressor, a 7-Zip-based archive compressor, involves reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to...

CVE-2026-54616

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2026-54616: Out-of-bounds Read

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...