Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2026/02/25 11:39 p.m.•8 views

CVE-2026-27709 NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

5.1CVSS5.5AI score0.0016EPSS
SaveExploits1References1
CVE
CVE
•added 2026/02/25 11:39 p.m.•34 views

CVE-2026-27709

NanaZip (open source) version range prior to 6.0.1638.0 and 6.5.1638.0 is affected by an out-of-bounds read in the .NET Single File Application parser during manifest parsing. A crafted bundle can cause a malformed RelativePathLength, leading to the parser constructing a std::string from memory b...

6.6CVSS5.5AI score0.0016EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2026/02/25 11:39 p.m.•14 views

CVE-2026-27709 NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

5.1CVSS5.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/25 11:39 p.m.•35 views

CVE-2026-27709 NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

5.1CVSS0.0016EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/02/25 11:39 p.m.•8 views

CVE-2026-27709

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

6.6CVSS5.5AI score0.0016EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•20 views

PT-2026-22043

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the...

5.1CVSS5.5AI score0.0016EPSS
SaveExploits1References2
Rows per page
Query Builder