CVE-2021-26623

The CVE-2021-26623 entry concerns Bandisoft’s ARK library, where a missing parameter-length validation in the xheader_decode_path_record function causes a remote code execution vulnerability. Multiple connected records corroborate: the issue is tied to an incomplete check for parameter length, en...

CVE-2021-26623 Bandisoft ARK Library Out-of-bound Vulnerability

A remote code execution vulnerability due to incomplete check for 'xheaderdecodepathrecord' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function...