CVE-2026-42444: falha de baixa gravidade em M2Team NanaZip
NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.3epss 0.1%
NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a denial-of-service vulnerability exists in the littlefs filesystem image parser in NanaZip. The handler's Open method reads BlockCount directly from the attacker-controlled superblock without any validation against the actual file size or any upper-bound ceiling, then iterates BlockCount times, allocating a file-path entry per iteration. A crafted 44-byte littlefs image with BlockCount = 0xFFFFFFFF causes ~4 billion heap allocations, exhausting available memory. This vulnerability is fixed in 6.0.1698.0.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
M2Team · NanaZipCVEs relacionadas — M2Team NanaZip
No mesmo produto, das mais perigosas para as menos.
CVE-2026-55780LOWNanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry SizeEPSS 0.6%CVE-2026-54616HIGHNanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return valueEPSS 0.4%CVE-2026-27114MEDIUMNanaZip has ROMFS Archive Infinite LoopEPSS 0.3%CVE-2026-44215MEDIUMNanaZip: Heap out-of-bounds write in NanaZip UFS directory parserEPSS 0.3%CVE-2026-47223MEDIUMNanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflowEPSS 0.2%CVE-2026-26282MEDIUMNanaZip has DotNet Single file OOB Heap ReadEPSS 0.2%