M2Team vulnerabilities

Newest CVEs

• CVE-2026-54616

  NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value

  M2Team · NanaZip

  High7.1
• CVE-2026-55781

  NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

  M2Team · NanaZip

  Low2.4
• CVE-2026-55780

  NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

  M2Team · NanaZip

  Low2.4
• CVE-2026-55783

  NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive

  M2Team · NanaZip

  Low2.4
• CVE-2026-55782

  NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields

  M2Team · NanaZip

  Low2.4
• CVE-2026-47223

  NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow

  M2Team · NanaZip

  Medium5.4
• CVE-2026-47224

  NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check

  M2Team · NanaZip

  Medium4.3
• CVE-2026-47222

  NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow

  M2Team · NanaZip

  Medium5.4
• CVE-2026-44215

  NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser

  M2Team · NanaZip

  Medium4.4
• CVE-2026-42445

  NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion

  M2Team · NanaZip

  Low3.3