Advisories · Technology
M2Team NanaZip.
Every CVE that names M2Team NanaZip among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value
- M2Team NanaZip
- Memory corruption
- CVSS 2.4 Low
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
- M2Team NanaZip
- Denial of service
- CVSS 2.4 Low
NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size
- M2Team NanaZip
- Denial of service
- CWE-248
- CVSS 2.4 Low
NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive
- M2Team NanaZip
- Memory corruption
- CVSS 2.4 Low
NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields
- M2Team NanaZip
- Denial of service
- CVSS 5.4 Medium
NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow
- M2Team NanaZip
- Memory corruption
- CVSS 4.3 Medium
NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check
- M2Team NanaZip
- Memory corruption
- CVSS 5.4 Medium
NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow
- M2Team NanaZip
- Memory corruption
- CVSS 4.4 Medium
NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser
- M2Team NanaZip
- Memory corruption
- CVSS 3.3 Low
NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion
- M2Team NanaZip
- Denial of service
- CVSS 3.3 Low
NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount
- M2Team NanaZip
- Denial of service
- CVSS 3.3 Low
NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation
- M2Team NanaZip
- Denial of service
- CVSS 3.3 Low
NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink
- M2Team NanaZip
- Memory corruption
- CVSS 3.3 Low
NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion
- M2Team NanaZip
- Denial of service
- CVSS 4.4 Medium
NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser
- M2Team NanaZip
- Memory corruption
- CVSS 5.1 Medium
NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length
- M2Team NanaZip
- Memory corruption
- CVSS 5.1 Medium
NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)
- M2Team NanaZip
- Memory corruption
- CVSS 5.1 Medium
NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength
- M2Team NanaZip
- Memory corruption
- CVSS 5.1 Medium
NanaZip has ROMFS Archive Infinite Loop
- M2Team NanaZip
- Denial of service
- CVSS 5.1 Medium
NanZip has ROMFS Archive Infinite Loop / Stack Overflow
- M2Team NanaZip
- Denial of service
- CVSS 5.2 Medium
NanaZip has DotNet Single file OOB Heap Read
- M2Team NanaZip
- CWE-126