Security Advisory

CVE-2024-26020

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-22 14:20:26
Last updated 2025-11-04 17:14:34
Assigner talos
State PUBLISHED

Description

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.