CVE-2026-55780

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...

PT-2026-22043

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

Apple Mac OS X Code Signature Bypass Vulnerability (CNVD-2015-02357)

Apple Mac OS X is an operating system developed by Apple Inc. A vulnerability exists in Apple Mac OS X's handling of applications containing specially crafted bundles, which allows attackers to exploit the vulnerability to launch tampered applications without the need for a full legal signature...