CVE-2026-47224

4.3 Moyenne

Publiée le 12/06/2026 à 19:16 · Modifiée le 17/06/2026 à 12:54 · Analyse NVD reportée · Source : security-advisories@github.com

Description

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip (via the upstream 7-Zip LvmHandler). The vulnerability is triggered when opening a crafted LVM disk image. This issue has been patched in stable version 6.0.1698.0 and preview version 6.5.1742.0.

Traduire en français

Produits concernés

M2Team NanaZip

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L`

Faiblesses (CWE)

CWE-125

Références

https://github.com/M2Team/NanaZip/security/advisories/GHSA-qcgf-c2vp-fwjr

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories