CVE-2025-62187

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the media folder).

2.9 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/ankitects/anki/pull/4041 Patch
https://github.com/ankitects/anki/pull/4041/commits/51476e05b281737a0c2924342bccdb6e5be52ea9 Patch
https://github.com/ankitects/anki/releases/tag/25.02.6 Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*
History

10 Oct 2025, 16:20

Type Values Removed Values Added
References () https://github.com/ankitects/anki/pull/4041 - () https://github.com/ankitects/anki/pull/4041 - Patch
References () https://github.com/ankitects/anki/pull/4041/commits/51476e05b281737a0c2924342bccdb6e5be52ea9 - () https://github.com/ankitects/anki/pull/4041/commits/51476e05b281737a0c2924342bccdb6e5be52ea9 - Patch
References () https://github.com/ankitects/anki/releases/tag/25.02.6 - () https://github.com/ankitects/anki/releases/tag/25.02.6 - Release Notes
CPE cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*
First Time Ankitects
Ankitects anki

07 Oct 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-07 21:15

Updated : 2025-10-10 16:20

NVD link : CVE-2025-62187

Mitre link : CVE-2025-62187

CVE.ORG link : CVE-2025-62187

JSON object : View

Products Affected

ankitects

  • anki
CWE
CWE-23

Relative Path Traversal