PT-2026-44436 · Nuget · Directxtk12 Desktop Win10+1

Publicado 2026-05-18 · Atualizado 2026-05-18

OSV

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Impact

The spritefont reader can be induced to perform a 32-bit overflow multiply that could in theory result in a RCE.

This impacts the use of the DirectX Tool Kit SpriteFont class file loading ctor if given untrusted data files.

Note this only applies to x86/ARM builds of the library. ARM64 and x64 native is not subject to this issue.

Patches

This bug has been fixed in the May 7, 2026 release. Alternatively, you can just update your copy of the reader as per this commit.

Workarounds

This does not apply if a project's .spritefont files are all 'trusted' data that were included with an application. It's primarily an issue only if developers are using user-provided or network downloaded spritefont files.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

GHSA-5R97-79VW-QVM4

Produtos afetados

Directxtk12 Desktop Win10

Directxtk12 Uwp

Referências · 5

• https://github.com/microsoft/DirectXTK12/security/advisories/GHSA-5r97-79vw-qvm4 · Nota
• https://github.com/microsoft/DirectXTK12 · Nota
• https://github.com/microsoft/DirectXTK12/releases/tag/may2026 · Nota
• https://github.com/microsoft/DirectXTK12/commit/c037a024a7ed3b2162fa2bbbe209b84ba2904494 · Nota
• https://osv.dev/vulnerability/GHSA-5r97-79vw-qvm4 · Aviso do Fabricante