CVE-2021-26603CWE-122

bandisoft ARK library heap overflow vulnerability

High · published September 9, 2021

CVSS v3.1
8.6
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.1th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2021-09-09T11:16Z
EPSS history
Timeline
  • 09 SEP 11:16Z
    bandisoft ARK library heap overflow vulnerability
    cvelistv5