MM2Team

Products

Exploited and recent CVEs

• CVE-2026-54616 High 7.1 NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value 0.4%
• CVE-2026-55781 Low 2.4 NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields 0.2%
• CVE-2026-55780 Low 2.4 NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size 0.6%
• CVE-2026-55783 Low 2.4 NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive 0.2%
• CVE-2026-55782 Low 2.4 NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields 0.2%
• CVE-2026-47223 Medium 5.4 NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow 0.2%
• CVE-2026-47224 Medium 4.3 NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check 0.2%
• CVE-2026-47222 Medium 5.4 NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow 0.2%
• CVE-2026-44215 Medium 4.4 NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser 0.3%
• CVE-2026-42445 Low 3.3 NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion 0.1%
• CVE-2026-42444 Low 3.3 NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount 0.1%
• CVE-2026-42443 Low 3.3 NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation 0.1%
• CVE-2026-42442 Low 3.3 NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink 0.1%
• CVE-2026-42355 Low 3.3 NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion 0.1%
• CVE-2026-42446 Medium 4.4 NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser 0.1%
• CVE-2026-27711 Medium 5.1 NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length 0.2%
• CVE-2026-27710 Medium 5.1 NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS) 0.2%
• CVE-2026-27709 Medium 5.1 NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength 0.2%
• CVE-2026-27114 Medium 5.1 NanaZip has ROMFS Archive Infinite Loop 0.3%
• CVE-2026-27014 Medium 5.1 NanZip has ROMFS Archive Infinite Loop / Stack Overflow 0.2%
• CVE-2026-26282 Medium 5.2 NanaZip has DotNet Single file OOB Heap Read 0.2%