Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-26635

Bandisoft ARK Library buffer overflow vulnerability

Description

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bandisoft International Inc. ark library

  • unspecified to ≤ 7.17affected

References