NanaZip 安全漏洞

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1630.0 contained security vulnerabilities. These vulnerabilities were caused by the NextOffset loop and deeply nested directories within the ROMFS archive parser, which could lead to infinite...