PT-2025-52517 · Arcsoft · Arcsoft Photostudio

Msd0Pe · Published 2025-12-19 · Updated 2025-12-20 · CVE-2023-53946

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arcsoft PhotoStudio version 6.0.0.172

Description Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability within the ArcSoft Exchange Service. This allows local attackers to potentially escalate privileges. Specifically, attackers can place a malicious executable within an unquoted path, and the service may execute this code with system-level permissions.

Recommendations Apply appropriate quoting to the service path to prevent the execution of unauthorized executables.

Exploit

Fix

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-53946

Affected Products

Arcsoft Photostudio

References · 6

• 🔥 https://exploit-db.com/exploits/51393 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53946 · Security Note
• https://twitter.com/CVEnew/status/2002466771924574285 · Twitter Post
• https://arcsoft.com · Note
• https://t.me/CVEtracker/40309 · Telegram Post
• https://vulncheck.com/advisories/arcsoft-photostudio-unquoted-service-path-privilege-escalation · Note