CVE-2024-26020

Description

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

References

https://blog.talosintelligence.com/vulnerability-roundup-july-31-apple-nvidia/

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1993

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3