CVE-2021-26623 — Bandisoft ARK Library Out-of-bound Vulnerability

CVE-2021-26623

Bandisoft ARK Library Out-of-bound Vulnerability PUBLISHED

Description (CNA)

A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.

Affected (CNA)

Vendor / product	Versions
Bandisoft International Inc. / Bandizip	affected unspecified through 7.19

CWE

CWE-125, CWE-787

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66595

ADP enrichment

CVE

No English description supplied.

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66595