Bandisoft ARK vulnerabilities

2 vulnerabilities

Known vulnerabilities in Bandisoft ARK, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2021-26603bandisoftark+1
EPSS score
0.66%
A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.8.8CVE-2021-26615bandisoftark+1
EPSS score
0.65%
ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow.