Microsoft Windows GDI Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability has been identified in Windows Graphics Device Interface (GDI) that allows an unauthorized attacker to locally disclose information. This out-of-bounds read vulnerability occurs when Windows GDI processes specially crafted Enhanced Metafiles (EMF), potentially allowing access to adjacent memory data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from the affected application’s memory.

Remediation

Users can apply the security update for their specific Windows version to address this vulnerability. Security update KB5082200 is available for various Windows 10 versions, while KB5082123 can be downloaded for Windows Server 2019. Windows Server 2022 users should look for KB5082142. For Windows 11, security updates KB5082052 and KB5083769 are available, depending on the system architecture. Windows Server 2025 users can also apply the security update KB5082063.