Product
NanaZip 6.5 and earlier are vulnerable to a denial-of-service attack due to an unbounded memory allocation in the UFS codec handler triggered by a malicious fs_bsize value in a UFS image file.