CVE-2024-26020

Publication date

2024-07-22 14:20:26

Family

talos

State

PUBLISHED

Description

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.