7.8High

CVE-2026-25191

Digital Arts Inc. FinalCode Ver.5 series; Digital Arts Inc. FinalCode Ver.6 series Published: (8 months ago)

Description

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.

Weakness (CWE): CWE-427

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Digital Arts Inc. FinalCode Ver.5 series prior to 5.43R01
Digital Arts Inc. FinalCode Ver.6 series prior to 6.51R01

References and patches