CyberRota Analysis
AI-GeneratedNanaZip versions prior to 6.5.1749.0 are vulnerable due to improper validation of the extraction buffer size in their .NET single-file bundle handler, potentially allowing crafted bundles to trigger allocation errors that can crash the application. This vulnerability poses a risk to users running affected versions on Windows, particularly those relying on NanaZip for file extraction. Organizations using NanaZip should prioritize upgrading to the latest version to mitigate potential disruptions and ensure stability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validated against the real file size. A crafted bundle can cause an attacker-chosen allocation inside Extract, where std::bad_alloc or std::length_error can escape across the COM STDMETHODCALLTYPE boundary and crash the process. This issue is fixed in version 6.5.1749.0.