VYPR
← All advisories
High severity8.6NVD Advisory· Published Sep 9, 2021· Updated Jun 17, 2026

CVE-2021-26603

CVE-2021-26603

Description

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

Affected products

3
  • Bandisoft/Ark Library2 versions
    cpe:2.3:a:bandisoft:ark_library:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bandisoft:ark_library:*:*:*:*:*:*:*:*range: <7.13.0.3
    • (no CPE)
  • bandisoft/ARKv5
    Range: 7.13.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.