VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Oct 7, 2025· Updated Jun 17, 2026

CVE-2025-62185

CVE-2025-62185

Description

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Ankitects/Ankillm-fuzzy3 versions
    <25.02.5+ 2 more
    • (no CPE)range: <25.02.5
    • (no CPE)range: 0
    • cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*range: <25.02.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.