- Advisory: GHSA-m34h-jf84-m74h · CVE-2026-55781
- Severity: Low · CWE-400/CWE-789
- Status: publicly disclosed and fixed. Reported by Pig-Tail through coordinated disclosure.
Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields
Write-up only. No standalone runnable PoC is published for this finding here — refer to the linked advisory for full technical detail, affected range, and the fixed version.