Unrated severityNVD Advisory· Published Oct 7, 2025· Updated Oct 8, 2025

CVE-2025-62185

Description

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ankitects/Ankillm-fuzzy2 versions
<25.02.5+ 1 more
- (no CPE)range: <25.02.5
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

github.com/ankitects/anki/commit/5080451829505842b16d4a50f398ad44560a3e48mitre
github.com/ankitects/anki/commit/6213c9b6f99ebda181004f8915b92fe3618b939mitre
github.com/ankitects/anki/compare/25.02.4...25.02.5mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000