CVE-2026-27711 - Vulnerability Analysis

Overview

NanaZip 5.0.1252.0 to before 6.0.1638.0 and 6.5.1638.0 contains a memory corruption vulnerability caused by out-of-bounds memory access in the UFS parser when opening crafted .ufs/.ufs2/.img files, letting attackers cause process crash or heap corruption, exploit requires user to open a crafted archive file.

Severity & Score

Impact

Attackers can cause process crash, hang, or potentially execute arbitrary code via heap corruption.

Mitigation

Update to version 6.0.1638.0 or 6.5.1638.0 or later.

References

• https://github.com/M2Team/NanaZip/security/advisories/GHSA-rjwv-4w7x-hc9c

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner