Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-27014 EUVD-2026-8314

NanZip has ROMFS Archive Infinite Loop / Stack Overflow

Published Feb 19, 2026 · Updated Feb 20, 2026 · Assigned by GitHub_M

Description

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.

Affected products

VendorProductAffectedFixed
M2Team NanaZip >= 5.0.1252.0, < 6.0.1630.0 —

References