CVE-2026-42442: falha de baixa gravidade em M2Team NanaZip
NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.3epss 0.1%
NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a null-pointer dereference exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted UFS image where the root inode (inode 2) is set to IFLNK (symlink) instead of IFDIR (directory). The parser unconditionally treats the root inode as a directory without checking its type, and when the symlink has an embedded target (small di_size), the directory data buffer is zero-length, causing a null-pointer dereference on the first read. This vulnerability is fixed in 6.0.1698.0.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
M2Team · NanaZipCVEs relacionadas — M2Team NanaZip
No mesmo produto, das mais perigosas para as menos.
CVE-2026-55780LOWNanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry SizeEPSS 0.6%CVE-2026-54616HIGHNanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return valueEPSS 0.4%CVE-2026-27114MEDIUMNanaZip has ROMFS Archive Infinite LoopEPSS 0.3%CVE-2026-44215MEDIUMNanaZip: Heap out-of-bounds write in NanaZip UFS directory parserEPSS 0.3%CVE-2026-47223MEDIUMNanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflowEPSS 0.2%CVE-2026-26282MEDIUMNanaZip has DotNet Single file OOB Heap ReadEPSS 0.2%