medium6.7

CVE-2025-62186

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.

Impact

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.

Affected products

Vendor	Product	Affected versions
Ankitects	Anki	before 25.02.5

Weakness classification

CWE-829

References

NVD record
CVE.org record
https://github.com/ankitects/anki/releases/tag/25.02.5