CVE-2024-29073

Advisory

Affected versions of the Anki package are vulnerable to Arbitrary File Read due to incomplete LaTeX sanitization that fails to block the `verbatim` package. The Latex handling module overlooks the `verbatim` package during sanitization, allowing specially crafted flashcards to include commands that read arbitrary files. An attacker can exploit this by sharing a malicious flashcard, which, when rendered by Anki 24.04, causes the application to read files on the user’s system, potentially exposing sensitive local data.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/ankitects/anki/commit/06f7aa393d21d7d5dd8039e15d543b73c3346932
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29073