๐Ÿ” CVE Alert

CVE-2026-27014

UNKNOWN 0.0

NanZip has ROMFS Archive Infinite Loop / Stack Overflow

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.

CWE CWE-674
Vendor m2team
Product nanazip
Published Feb 19, 2026
Last Updated Feb 20, 2026
Stay Ahead of the Next One

Get instant alerts for m2team nanazip

Be the first to know when new unknown vulnerabilities affecting m2team nanazip are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

M2Team / NanaZip
>= 5.0.1252.0, < 6.0.1630.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/M2Team/NanaZip/security/advisories/GHSA-fc89-3f57-h9q5