Microsoft Windows GDI Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability has been identified in Windows Graphics Device Interface (GDI) that allows an unauthorized attacker to locally disclose information. This out-of-bounds read issue occurs when the affected application processes a specially crafted Enhanced Metafile (EMF), potentially allowing access to small portions of memory from adjacent memory at the time.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200, KB5082052, KB5083768, KB5082063, and KB5082142.