PT-2025-2206 · Obsproject · Obs Studio

Fergod · Published 2025-01-20 · Updated 2025-01-20 · CVE-2024-13524

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions obsproject OBS Studio versions up to 30.0.2

Description A vulnerability has been found in obsproject OBS Studio, affecting an unknown functionality. The manipulation leads to an untrusted search path. The attack needs to be approached locally and has a rather high complexity, making exploitation difficult. The vendor disagrees that this issue is worth reporting, as every attack surface requires privileged access or user compromise.

Recommendations To fix this issue, it is recommended to apply a patch for versions up to 30.0.2. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2024-13524

Affected Products

Obs Studio

References · 10

• https://github.com/obsproject/obs-studio/pull/11569 · Patch
• https://osv.dev/vulnerability/CVE-2024-13524 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13524 · Security Note
• https://t.me/cvedetector/15878 · Telegram Post
• https://twitter.com/BaseFortify/status/1881326493462409463 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1881198448151584837 · Twitter Post
• https://t.me/cvenotify/107914 · Telegram Post
• https://vuldb.com/?submit.480875 · Note
• https://vuldb.com/?id.292495 · Note
• https://vuldb.com/?ctiid.292495 · Note