CVE-2026-27014
- Source
- https://cve.org/CVERecord?id=CVE-2026-27014
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27014.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-27014
- Aliases
-
- GHSA-fc89-3f57-h9q5
- Published
- 2026-02-19T20:45:07.953Z
- Modified
- 2026-02-22T01:54:18.200228Z
- Severity
-
- 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- NanZip has ROMFS Archive Infinite Loop / Stack Overflow
- Details
-
NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular
NextOffsetchains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue. - Database specific
{ "cwe_ids": [ "CWE-674" ], "cna_assigner": "GitHub_M", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27014.json" }- References