High severity · published Jun 2, 2022
CVE-2021-26635
In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type
7.8
CVSS
1.2%
EPSS
No
On KEV
Description
In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Ark Library · Bandisoft
before 7.17 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26635
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26635
Broken Link
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66747
More from Ark Library
8.8
CVE-2021-26615
ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow
7.8
CVE-2021-26603
A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path