Description
<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p>
<p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p>
<p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1803 | N/A | — |
| Microsoft | Windows 10 Version 1809 | N/A | — |
| Microsoft | Windows 10 Version 1909 | N/A | — |
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | N/A | — |
| Microsoft | Windows 10 Version 1709 | N/A | — |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | N/A | — |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | N/A | — |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | N/A | — |
| Microsoft | Windows 10 Version 2004 | N/A | — |