CVE-2026-55781-poc

CVE-2026-55781 — NanaZip UFS Parser DoS Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled fsbsize field. Summary | Field | Value | |---|---| | CVE | CVE-2026-55781 | | Advisory | GHSA-m34h-jf84-m74h | | Vendor | M2Team / NanaZip | | Affected | NanaZip = 6.5 Preview...

CVE-2026-55781-poc

CVE-2026-55781 — NanaZip UFS Parser DoS Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled fsbsize field. Summary | Field | Value | |---|---| | CVE | CVE-2026-55781 | | Advisory | GHSA-m34h-jf84-m74h | | Vendor | M2Team / NanaZip | | Affected | NanaZip = 6.5 Preview...

CVE-2026-55781-poc

CVE-2026-55781 — DoS del analizador UFS de NanaZip Asignación de memoria sin límites en el controlador UFS de NanaZip mediante un campo fsbsize controlado por el atacante. Resumen Campo| Valor ---|--- CVE| CVE-2026-55781 Aviso| GHSA-m34h-jf84-m74h Proveedor| M2Team / NanaZip Afectado| NanaZip = 6...

Exploit for CVE-2026-55781

markdown CVE-2026-55781 — NanaZip UFS Parser DoS Unbounded...

SquashFS Component Disclosure DoS

The vulnerability of the Lz4Decode function in the NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp component of the SquashFS compressor, a 7-Zip-based archive compressor, involves reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to...

CVE-2026-54616

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2026-54616

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2026-54616 NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

EUVD-2026-63481

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2026-54616 NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

CVE-2026-54616

NanaZip (a 7-Zip derivative for modern Windows) is affected by a heap out-of-bounds read in the SquashFS LZ4 decompressor (Lz4Decode in SquashfsHandler.cpp). The root cause is that the function only rejects a zero return from LZ4_decompress_safe, while malformed input produces a negative error va...

CVE-2026-54616 NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

PT-2026-79050

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4 decompress saf...

NanaZip 6.5 Denial of Service

NanaZip version 6.5 suffers from a denial of service vulnerability. A crafted .NET single-file bundle triggers an uncaught exception / unbounded allocation in the DotNetSingleFile handler's Extract. Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla...

CVE-2026-54616: Out-of-bounds Read

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...

NanaZip 6.5 - DoS

Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/M2Team/NanaZip Software Link: https://github.com/M2Team/NanaZip/releases Version: NanaZip 3 GiB. All superb...

NanaZip 6.5 - DoS

Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/M2Team/NanaZip Software Link: https://github.com/M2Team/NanaZip/releases Version: NanaZip = 6.5 Preview 6.5.1742.0 fixed 6.5.1749.0 Tested on: Windows CVE:...

CVE-2026-55782

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp allocates buffers from attacker-controlled 32-bit section and custom-name length fields without validating them against...

CVE-2026-55783

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dereference the caller-supplied Indices array inside Extract when the archive engine signals extract everything by passin...

CVE-2026-55780

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...