CVE-2026-27710

CVE-2026-27710 affects NanaZip prior to fixed versions 6.0.1638.0 and 6.5.1638.0, where the ".NET Single File Application" parser is vulnerable to a denial-of-service due to an integer underflow in header-size calculation, which can trigger an unbounded memory allocation when opening a crafted bu...

yara:dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5880393521430528 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61300000035...

yara:dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5636481138556928 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61c000000f6c...