CVE-2024-32152: Ankitects Anki

Medium severity, CVSS 4.3. EPSS: 12.3% chance of exploitation in the next 30 days.

A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.

Affected products

• Ankitects Anki: version 24.04 only

Published 2024-07-22. Last modified 2026-06-17.