M2Team vulnerabilities
We track 4 vulnerabilities in M2Team products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
Latest M2Team vulnerabilities
- 7.1 High severity
NanaZip: Out-of-bounds Read
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only
- 7.1 High severity
NanaZip: Out-of-bounds Write
NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of-bounds null write exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted UFS filesystem image. The at
- 7.1 High severity
NanaZip: Out-of-bounds Read
NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-bounds read exists in the ZealFS filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted ZealFS v1 filesystem image. An attacke
- 7.5 High severity
NanaZip: Loop with Unreachable Exit Condition
NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.