CVE-2021-26635

 

Published at: - 02-06-2022 04:15

Last modified: - 09-06-2022 06:45

Total changes: - 2

Description

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66747

 

Keywords

NVD

 

CVE-2021-26635

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures