PT-2026-21934 · Asbplayer · Asbplayer

Published 2026-02-25 · Updated 2026-03-02 · CVE-2025-69771

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions asbplayer version 1.13.0

Description An arbitrary file upload issue exists in the subtitle loading function. Successful exploitation allows attackers to execute arbitrary code by uploading a specially crafted subtitle file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-69771

Affected Products

Asbplayer

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-69771 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69771 · Vendor Advisory
• https://github.com/killergerbah/asbplayer · Note
• https://t.me/CVEtracker/45743 · Telegram Post
• http://chrome.com · Note
• http://killergerbah.com · Note
• https://reve-offensive.tistory.com/35 · Note
• https://t.me/cveNotify/153817 · Telegram Post
• https://t.me/cveNotify/153474 · Telegram Post
• https://twitter.com/TheHackerWire/status/2027140436549357928 · Twitter Post
• https://twitter.com/CVEnew/status/2027744294434398536 · Twitter Post
• https://twitter.com/infoflowcloud/status/2027744662925070781 · Twitter Post