CVE-2026-27709

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-27709

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27709.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-27709

Aliases

GHSA-vr4w-xc78-w6fv

Published

2026-02-25T23:39:03.772Z

Modified

2026-03-01T02:23:32.618625Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength

Details

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s .NET Single File Application parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed RelativePathLength so the parser constructs a std::string from memory beyond HeaderBuffer, leading to crash and potential in-process memory disclosure. Versions 6.0.1638.0 and 6.5.1638.0 fix the issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27709.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-125"
    ]
}

References

Affected packages

Git / github.com/m2team/nanazip

Affected ranges

Type: GIT
Repo: https://github.com/m2team/nanazip
Events: Introduced

401fa98a9aeaeef137d66303ccbb442366b46e51

Fixed

91104bb04a5a811895143da1b9a4ad64c97dcaa3

Affected versions

5.*

5.0.1252.0

5.0.1263.0

5.1.1252.0

5.1.1263.0

6.*

6.0.1461.0

6.0.1621.0

6.0.1630.0

6.0.1632.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27709.json"