Vulnerabilitycritical
New GDI Flaws Could Enable Remote Code Execution in Windows
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-30388 | Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally | 7.8 | 4% | ||
| CVE-2025-47984 | Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network | 7.5 | 16% | ||
| CVE-2025-53766 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network | 9.8 | 7% |
From the original article
2 min read at infosecurity-magazine.com
A set of previously unknown flaws in Windows Graphics Device Interface (GDI) that could enable remote code execution and information disclosure has been revealed after Microsoft released fixes. These issues involve malformed enhanced metafile (EMF) and EMF+ records that can cause memory corruption during image rendering. The findings expand understanding of attack surfaces tied to Windows graphics processing.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.