PT-2026-48930 · Nanazip · Nanazip

CVE-2026-47224

·

Published

2026-06-12

·

Updated

2026-06-16

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions NanaZip versions 3.0.1000.0 through 6.0.1697.0
Description A heap buffer-overflow read exists in the LVM2 physical-volume metadata parser, which is handled via the upstream 7-Zip LvmHandler. This issue occurs when the software opens a specially crafted LVM disk image.
Recommendations Update to stable version 6.0.1698.0 or preview version 6.5.1742.0.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-47224
GHSA-QCGF-C2VP-FWJR

Affected Products

Nanazip