CVE-2019-25345CWE-428

RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path

High · published February 12, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service configuration to inject malicious executables and escalate privileges on the system.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-12T19:02Z
EPSS history
Timeline
  • 12 FEB 19:02Z
    RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path
    cvelistv5