Approved changes feed: RSS · Atom

cpe:2.3:a:bandisoft:ark:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBandisoft (a4cde321-a09b-551b-a015-afe258c24e5b)
ProductArk (07c9f714-391c-5a18-b994-99a6f9ea9237)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26615 vulnerable 2026-06-08 05:30:44.963100 bandisoft ARK library integer overflow vulnerability
HIGH (7.8)
ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow.
Published: 2021-11-26T16:33:59.000Z
Updated: 2024-08-03T20:26:25.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26603 vulnerable 2026-06-08 05:30:44.931839 bandisoft ARK library heap overflow vulnerability
HIGH (8.6)
A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.
Published: 2021-09-09T11:16:32.000Z
Updated: 2024-08-03T20:26:25.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.