CVE-2026-42446

{
  "id": "CVE-2026-42446",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T20:16:41.900",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-bounds read exists in the ZealFS filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted ZealFS v1 filesystem image. An attacker-controlled BitmapSize field in the file header drives an unbounded loop that reads past the end of a stack-allocated ZEALFS_V1_HEADER structure. This vulnerability is fixed in 6.0.1698.0."
    },
    {
      "lang": "es",
      "value": "NanaZip es un archivador de archivos de código abierto. Desde 5.0.1252.0 hasta antes de 6.0.1698.0, existe una lectura fuera de límites basada en pila en el analizador de imágenes de sistema de archivos ZealFS en NanaZip. La vulnerabilidad se activa al abrir una imagen de sistema de archivos ZealFS v1 manipulada. Un campo BitmapSize controlado por el atacante en la cabecera del archivo provoca un bucle ilimitado que lee más allá del final de una estructura ZEALFS_V1_HEADER asignada en la pila. Esta vulnerabilidad está corregida en 6.0.1698.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "M2Team",
          "product": "NanaZip",
          "versions": [
            {
              "version": ">= 5.0.1250.0, < 6.0.1698.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 2.5
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T14:17:07.741491Z",
          "id": "CVE-2026-42446",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "5.0.1252.0",
              "versionEndExcluding": "6.0.1698.0",
              "matchCriteriaId": "60D88926-2653-48FD-A4FE-B8CB8EB39E55"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/M2Team/NanaZip/security/advisories/GHSA-4c79-hfr4-mqv9",
      "source": "[email protected]",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ]
    }
  ]
}