What’s Vulnerable › Products
M2Team NanaZip vulnerabilities
21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.
Check whether your M2Team NanaZip version is affected
Latest M2Team NanaZip vulnerabilities
- CVE-2026-54616 — NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value (CVSS 7.1)
- CVE-2026-55783 — NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive (CVSS 2.4)
- CVE-2026-55782 — NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields (CVSS 2.4)
- CVE-2026-55781 — NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields (CVSS 2.4)
- CVE-2026-55780 — NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size (CVSS 2.4)
- CVE-2026-47223 — NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow (CVSS 5.4)
- CVE-2026-47224 — NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check (CVSS 4.3)
- CVE-2026-47222 — NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow (CVSS 5.4)
- CVE-2026-44215 — NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser (CVSS 7.1)
- CVE-2026-42446 — NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser (CVSS 7.1)
- CVE-2026-42445 — NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion (CVSS 5.5)
- CVE-2026-42444 — NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount (CVSS 5.5)
- CVE-2026-42443 — NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation (CVSS 5.5)
- CVE-2026-42442 — NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink (CVSS 5.5)
- CVE-2026-42355 — NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion (CVSS 5.5)
- CVE-2026-27711 — NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length (CVSS 6.6)
- CVE-2026-27710 — NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS) (CVSS 5.0)
- CVE-2026-27709 — NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength (CVSS 6.6)
- CVE-2026-27114 — NanaZip has ROMFS Archive Infinite Loop (CVSS 7.5)
- CVE-2026-27014 — NanZip has ROMFS Archive Infinite Loop / Stack Overflow (CVSS 5.5)
- CVE-2026-26282 — NanaZip has DotNet Single file OOB Heap Read (CVSS 6.6)