JVN#98871848
Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries

Overview

Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries.

Products Affected

• Bytello Share (Windows Edition) versions prior to 5.13.0.4246

Description

Bytello Share provided by Bytello is the screen mirroring tool for large displays. Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries.

• Uncontrolled search path element (CWE-427)
  • CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.4
  • CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Base Score 7.8
  • CVE-2026-44612
  • The CVSS scores above assume that a victim user is directed to download and place a specially crafted DLL file with the affected installer and to execute the installer.

Impact

If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.

Solution

Use the latest installer
The latest version 5.13.0.4246 is provided as the MSI installation package.