PT-2025-3959 · Epic Games · Epic Games Launcher

Havook · Published 2025-01-19 · Updated 2025-01-19 · CVE-2025-0567

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Epic Games Launcher versions up to 17.2.1

Description A vulnerability was found in the Epic Games Launcher, affecting the library profapi.dll of the component Installer. The issue leads to an untrusted search path. Local attack is required, and the complexity of the attack is rather high, making exploitation difficult.

Recommendations For Epic Games Launcher versions up to 17.2.1, update to a version later than 17.2.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-0567

Affected Products

Epic Games Launcher

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-0567 · Security Note
• https://t.me/cvenotify/107899 · Telegram Post
• https://vuldb.com/?ctiid.292528 · Note
• https://t.me/cvedetector/15821 · Telegram Post
• https://vuldb.com/?id.292528 · Note
• https://twitter.com/VulmonFeeds/status/1880893655440867677 · Twitter Post
• https://twitter.com/CVEnew/status/1880988208336695387 · Twitter Post
• https://vuldb.com/?submit.481104 · Note