CNNVD-202602-2094 Information

CNNVD ID

CNNVD-202602-2094

CVE-2019-25345

  • CNNVD Published: 2026-02-12

Description (Chinese)

Realtek IIS Codec Service是中国瑞昱半导体(Realtek)公司的一个音频解码器的后台服务。 Realtek IIS Codec Service 6.4.10041.133版本存在代码问题漏洞,该漏洞源于服务路径未加引号,可能导致本地攻击者执行任意代码。

Description (English)

Realtek IS Code Service is a back-office service for an audio decoder at Realtek. Realtek IS Code Service 6.4.10041.133 has a code gap, which stems from the absence of quotation marks on service routes, which may lead local attackers to enforce arbitrary codes.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

瑞昱半导体

Published

2026-02-12

Last Modified

2026-02-24

References

https://www.exploit-db.com/exploits/47642 https://www.realtek.com/en/ https://www.vulncheck.com/advisories/rtk-iis-codec-service-rtkiscodec-unquote-service-path

Share on: