Unrated severityNVD Advisory· Published Feb 19, 2026· Updated Feb 25, 2026
NanaZip has ROMFS Archive Infinite Loop
CVE-2026-27114
Description
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/M2Team/NanaZip/security/advisories/GHSA-hfg9-6rf9-5pgxmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.