← Database

CVE-2026-27014

MEDIUM CVSS: 5.5 Published: 2026-02-19 Modified: 2026-06-17

Description

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.

Affected Platforms

M2Team Nanazip

Weakness Type

CWE-674

References