Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Bandisoft Component: Ark Library Clear all filters
TI-2021-08352 CVE-2021-26635 · GHSA-q857-c59w-xm8f

Bandisoft ARK Library buffer overflow vulnerability

Priority LOW 37

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01226 Published 2022-06-01 No fix listed CWE-121
TI-2021-08333 CVE-2021-26615 · GHSA-36cv-4pg6-wh63

bandisoft ARK library integer overflow vulnerability

Priority LOW 39

ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00654 Published 2021-11-26 No fix listed CWE-190
TI-2021-08322 CVE-2021-26603 · GHSA-xcf9-rf7p-r7f6

bandisoft ARK library heap overflow vulnerability

Priority LOW 38

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00664 Published 2021-09-09 No fix listed CWE-122