CVE-2021-26603 HIGH

CVE-2021-26603: bandisoft ARK library heap overflow vulnerability

Vendor Bandisoft

Product ARK

Weakness CWE-122

Published September 9, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

8.6/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

Key dates

02Disclosure timeline

September 9, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-26603 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html