Arbitrary File Write Vulnerability in Ankitects Anki Application
CVE-2025-62187

2.9LOW

Key Information:

Vendor

Ankitects

Status
Anki
Vendor
CVE Published:
7 October 2025

What is CVE-2025-62187?

A vulnerability exists in Ankitects Anki prior to version 25.02.6, where crafted sound file references can lead to arbitrary file writing on both Windows and Linux platforms. This occurs because the media file pathnames are not constrained to the media folder, potentially allowing unauthorized access or modification of files in various locations on the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Anki 0 < 25.02.6

References

https://github.com/ankitects/anki/releases/tag/25.02.6
https://github.com/ankitects/anki/pull/4041
https://github.com/ankitects/anki/pull/4041/commits/51476...

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.