CVE-2026-27711: NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a memory corruption vulnerability in NanaZip’s UFS parser allows a crafted .ufs/.ufs2/.img file to trigger out-of-bounds memory access during archive open/listing. The bug is reachable via normal user file-open flow and can cause process crash, hang, and potentially exploitable heap corruption. Versions 6.0.1638.0 and 6.5.1638.0 fix the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27711?
CVE-2026-27711 has been rated as a critical vulnerability due to its potential for causing memory corruption.
How do I fix CVE-2026-27711?
To fix CVE-2026-27711, upgrade NanaZip to version 6.0.1638.0 or later.
What types of files are affected by CVE-2026-27711?
CVE-2026-27711 affects `.ufs`, `.ufs2`, and `.img` file formats processed by NanaZip.
Who is affected by CVE-2026-27711?
Users of NanaZip versions from 5.0.1252.0 up to but not including 6.0.1638.0 are affected by CVE-2026-27711.
What causes CVE-2026-27711?
CVE-2026-27711 is caused by unvalidated directory record lengths in NanaZip's UFS archive parser.