CVE-2026-27014 — NanZip has ROMFS Archive Infinite Loop / Stack Overflow

CVE-2026-27014

NanZip has ROMFS Archive Infinite Loop / Stack Overflow PUBLISHED

Description (CNA)

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.

Affected (CNA)

Vendor / product	Versions
M2Team / NanaZip	affected >= 5.0.1252.0, < 6.0.1630.0

CWE

CWE-674

References

https://github.com/M2Team/NanaZip/security/advisories/GHSA-fc89-3f57-h9q5

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.