PT-2026-7881 · Realtek · Rtk Iis Codec Service

Chuyreds · CVE-2019-25345 · Published 2026-02-12 · Updated 2026-02-12

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek IIS Codec Service version 6.4.10041.133

Description An unquoted service path issue exists which allows local attackers to potentially execute arbitrary code. By exploiting the unquoted path in the service configuration, an attacker can inject malicious executables to escalate privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25345

Affected Products

Rtk Iis Codec Service

References · 4

• 🔥 https://exploit-db.com/exploits/47642 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25345 · Security Note
• https://realtek.com/en · Note
• https://vulncheck.com/advisories/rtk-iis-codec-service-rtkiscodec-unquote-service-path · Note