Bandisoft International Inc. vulnerabilities
2 vulnerabilities
Known vulnerabilities in Bandisoft International Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Ark Library1 vulnerabilities
- Bandizip1 vulnerabilities
CVE-2021-26635bandisoft international inc.ark library+1
EPSS score1.23%
In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution.CVE-2021-26623bandisoft international inc.bandizip+1EPSS score1.13%
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.