7.8High
CVE-2026-25191
Description
The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.
Weakness (CWE):
CWE-427
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Digital Arts Inc. | FinalCode Ver.5 series | prior to 5.43R01 | |
| Digital Arts Inc. | FinalCode Ver.6 series | prior to 6.51R01 |