CVE-2026-55782— NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields
Possible ATT&CK Techniques 2AI
T1068 · Exploitation for Privilege Escalation T1496 · Resource HijackingGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-55782
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields
Source: NVD (National Vulnerability Database)
Vulnerability Description
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp allocates buffers from attacker-controlled 32-bit section and custom-name length fields without validating them against the data present in the file. A tiny crafted module can force multi-gigabyte allocations during listing or extraction through NameSize, Information.Size, and std::string or vector allocation paths, causing memory exhaustion or process termination. This issue is fixed in version 6.5.1749.0.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-55782
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55782
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55782 (3)
Vendor Advisories for CVE-2026-55782 (1)
Vendor Pages for CVE-2026-55782 (1)
Same Patch Batch · M2Team · 2026-07-10 · 4 CVEs total
| CVE-2026-55780 | NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() v | |
| CVE-2026-55783 | NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handler | |
| CVE-2026-55781 | NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/ |
IV. Related Vulnerabilities
Same product: NanaZip
- CVE-2026-55781
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS pa - CVE-2026-55780
NanaZip: Uncaught exception / unbounded allocation in NanaZi - CVE-2026-55783
NanaZip: NULL pointer dereference in Extract() of all seven - CVE-2026-47223
NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree des - CVE-2026-47224
NanaZip: Heap buffer-overflow read in NanaZip LVM metadata C
Same vendor: M2Team
- CVE-2026-55781
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS pa - CVE-2026-55780
NanaZip: Uncaught exception / unbounded allocation in NanaZi - CVE-2026-55783
NanaZip: NULL pointer dereference in Extract() of all seven - CVE-2026-47223
NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree des - CVE-2026-47224
NanaZip: Heap buffer-overflow read in NanaZip LVM metadata C
Same weakness: CWE-400
- CVE-2026-55781
NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS pa - CVE-2026-59161
Excelize: Streaming GetRows row-bound bypass causes attacker - CVE-2026-8609
Pre-authentication denial of service via the OAuth login rou - CVE-2026-33382
Denial of service via unbounded request body size - CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via
V. Comments for CVE-2026-55782
No comments yet