high7.8
CVE-2021-26623
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library.
Impact
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bandisoft | Bandizip | before 7.19 |