CVE-2026-42443

NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-zero exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted UFS image where the superblock field fs_ipg (inodes per cylinder group) is set to zero. The parser uses this attacker-controlled value as a divisor without validation, causing an immediate hardware trap and process crash. This vulnerability is fixed in 6.0.1698.0.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/M2Team/NanaZip/security/advisories/GHSA-3x2h-gqqw-g3gm	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) NanaZip es un archivador de archivos de código abierto. Desde la versión 5.0.1252.0 hasta antes de la 6.0.1698.0, existe una división por cero de enteros en el analizador de imágenes del sistema de archivos UFS/UFS2 en NanaZip. La vulnerabilidad se activa al abrir una imagen UFS manipulada donde el campo fs_ipg (inodos por grupo de cilindros) del superbloque está configurado a cero. El analizador utiliza este valor controlado por el atacante como divisor sin validación, lo que provoca una interrupción de hardware inmediata y un fallo del proceso. Esta vulnerabilidad está corregida en la versión 6.0.1698.0.

Information

Published : 2026-05-12 20:16

Updated : 2026-10-26 18:10

NVD link : CVE-2026-42443

Mitre link : CVE-2026-42443

CVE.ORG link : CVE-2026-42443

JSON object : View

Products Affected

m2team

nanazip

CWE

CWE-369

Divide By Zero

{"id": "CVE-2026-42443", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42443", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T19:43:56.716052Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "M2Team", "product": "NanaZip", "versions": [{"status": "affected", "version": ">= 5.0.1250.0, < 6.0.1698.0"}]}]}], "published": "2026-05-12T20:16:41.520", "references": [{"url": "https://github.com/M2Team/NanaZip/security/advisories/GHSA-3x2h-gqqw-g3gm", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-369"}]}], "descriptions": [{"lang": "en", "value": "NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-zero exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted UFS image where the superblock field fs_ipg (inodes per cylinder group) is set to zero. The parser uses this attacker-controlled value as a divisor without validation, causing an immediate hardware trap and process crash. This vulnerability is fixed in 6.0.1698.0."}, {"lang": "es", "value": "NanaZip es un archivador de archivos de c\u00f3digo abierto. Desde la versi\u00f3n 5.0.1252.0 hasta antes de la 6.0.1698.0, existe una divisi\u00f3n por cero de enteros en el analizador de im\u00e1genes del sistema de archivos UFS/UFS2 en NanaZip. La vulnerabilidad se activa al abrir una imagen UFS manipulada donde el campo fs_ipg (inodos por grupo de cilindros) del superbloque est\u00e1 configurado a cero. El analizador utiliza este valor controlado por el atacante como divisor sin validaci\u00f3n, lo que provoca una interrupci\u00f3n de hardware inmediata y un fallo del proceso. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 6.0.1698.0."}], "lastModified": "2026-10-26T18:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60D88926-2653-48FD-A4FE-B8CB8EB39E55", "versionEndExcluding": "6.0.1698.0", "versionStartIncluding": "5.0.1252.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}