What is the CVSS score of EUVD-2026-36507?

EUVD-2026-36507 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.0%.

Is there a patch available for EUVD-2026-36507?

Yes, a patch is available for EUVD-2026-36507. Update the affected software to the latest version immediately.

NanaZip EUVD-2026-36507

| CVE-2026-47224 MEDIUM

Out-of-bounds Read (CWE-125)

2026-06-12 GitHub_M

Microsoft Information Disclosure Buffer Overflow Nanazip

4.3

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

vuln.today AI

5.4 MEDIUM

AV:N reflects network-deliverable file delivery; C:L added over official C:N to account for CWE-125 heap read's realistic potential for adjacent memory exposure.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Patch available

Jun 12, 2026 - 18:01 EUVD

Analysis Generated

Jun 12, 2026 - 17:37 vuln.today

CVE Published

Jun 12, 2026 - 16:57 cve.org

MEDIUM 4.3

DescriptionCVE.org

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip (via the upstream 7-Zip LvmHandler). The vulnerability is triggered when opening a crafted LVM disk image. This issue has been patched in stable version 6.0.1698.0 and preview version 6.5.1742.0.

AnalysisAI

Heap out-of-bounds read in NanaZip's inherited 7-Zip LvmHandler component allows an unauthenticated remote attacker to crash the application or potentially expose heap memory by tricking a user into opening a maliciously crafted LVM2 disk image. All NanaZip installations from version 3.0.1000.0 up to (but not including) 6.0.1698.0 on Windows are vulnerable. No public exploit code or active exploitation has been identified; an EPSS score of 0.04% at the 11th percentile reflects very low real-world exploitation probability.

Technical ContextAI

NanaZip (CPE: cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*) is a modern Windows-focused derivative of 7-Zip and inherits 7-Zip's LvmHandler, the component responsible for parsing LVM2 (Linux Volume Manager 2) physical-volume metadata embedded in raw disk images. The root cause, CWE-125 (Out-of-bounds Read), indicates that the parser reads beyond the allocated heap buffer boundary - a class of bug typically arising when variable-length record counts or field-offset values inside a crafted disk image header are not validated before the parser iterates over them. Because the overflow is a read (not a write), direct code execution is considered unlikely, but heap memory adjacent to the buffer may be exposed and process stability is impaired. The upstream 7-Zip LvmHandler origin means other 7-Zip-based archivers potentially share the same code path, though only NanaZip is confirmed affected by this advisory.

RemediationAI

Vendor-released patch: upgrade NanaZip to stable version 6.0.1698.0 or preview version 6.5.1742.0, both confirmed fixed per the vendor advisory at https://github.com/M2Team/NanaZip/security/advisories/GHSA-qcgf-c2vp-fwjr. If an immediate upgrade is not feasible, avoid opening untrusted LVM2 or raw disk image files in NanaZip; removing or restricting the Windows file-type association for LVM-related image formats (e.g., .img, raw disk images) reduces attack surface but may disrupt legitimate disk-image workflows. No server-side workarounds apply as this is a client desktop application.