CVE-2021-26623
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Bandisoft International Inc. | Bandizip | unspecified <= 7.19 | affected |
Weaknesses
- CWE-125: CWE-125 Out-of-bounds Read
- CWE-787: CWE-787 Out-of-bounds Write
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.