CVE-2021-26603: Bandisoft Ark Library

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

Affected products

• Bandisoft Ark Library: before 7.13.0.3 (fixed in 7.13.0.3)

Published 2021-09-09. Last modified 2026-06-17.