Description
ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bandisoft | ARK | 7.13.0.3 | — |
High · 7.8
CVE-2021-26615
EUVD-2021-13409GHSA-36cv-4pg6-wh63
bandisoft ARK library integer overflow vulnerability
Published Nov 26, 2021 · Updated Aug 3, 2024 · Assigned by krcert