Read the docs

Bandisoft

Records12All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Bandisoft records in CISA KEV
TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-09-13

Components

Products in the NVD configurations · select one to filter the records
Bandiview 4 records MEDIUM Ark Library 3 records LOW Bandizip 3 records HIGH Honeyview 1 record CRITICAL

Records

3 records in Ark Library · all components

TI-2021-08333 CVE-2021-26615 · GHSA-36cv-4pg6-wh63

bandisoft ARK library integer overflow vulnerability

Priority LOW 39

ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00654 Published 2021-11-26 No fix listed CWE-190
TI-2021-08322 CVE-2021-26603 · GHSA-xcf9-rf7p-r7f6

bandisoft ARK library heap overflow vulnerability

Priority LOW 38

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00664 Published 2021-09-09 No fix listed CWE-122
TI-2021-08352 CVE-2021-26635 · GHSA-q857-c59w-xm8f

Bandisoft ARK Library buffer overflow vulnerability

Priority LOW 37

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01226 Published 2022-06-01 No fix listed CWE-121
Open these records in search →