CVE-2025-9056

Medium · 5.3

CVSS

5.3

EPSS

0.2%

Published

Dec 10, 2025

CISA due date

—

The record

Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.

Ecosystem	Package	Introduced	Fixed