CVE-2026-55782
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
NanaZip prior to version 6.5.1749.0 has a vulnerability in its WebAssembly archive handler where an attacker can control buffer allocation sizes. By crafting a file with manipulated NameSize and Information.Size fields, multi-gigabyte memory allocations can be forced, leading to memory exhaustion or process termination.
Risk Assessment
An attacker can remotely cause a denial of service (DoS) by sending a small malicious file that, when listed or extracted, exhausts system memory and crashes the application.
Recommendation
Immediately update NanaZip to version 6.5.1749.0 or later, which includes a fix that validates buffer sizes before allocation.
Original NVD description (English source)
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp allocates buffers from attacker-controlled 32-bit section and custom-name length fields without validating them against the data present in the file. A tiny crafted module can force multi-gigabyte allocations during listing or extraction through NameSize, Information.Size, and std::string or vector allocation paths, causing memory exhaustion or process termination. This issue is fixed in version 6.5.1749.0.