https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:08:30.197879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-55783 CVE-2026-55783 — NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the… 2026-10-07T12:08:30.215008+00:00

Affected: M2Team NanaZip

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dereference the caller-supplied Indices array inside Extract when the archive engine signals extract everything by passing Indices as NULL and NumItems as 0xFFFFFFFF. This causes a NULL pointer dereference in the standard Test archive or Extract all code path for WebAssembly, ElectronAsar, Zealfs, Romfs, Ufs, Littlefs, and DotNetSingleFile archives, resulting in a process crash. This issue is fixed in version 6.5.1749.0.