Robert Gawlik

**Name of the Vulnerable Software and Affected Versions** Wine version 3.7 **Description** The issue allows attackers to cause a denial of service or possibly have other impact due to an out-of-bounds write. This is because the attacker controls the `pCreatePen->ihPen` array index in the `PlayEnhMetaFileRecord` function in `enhmetafile.c`. **Recommendations** For Wine version 3.7, consider restricting access to the `PlayEnhMetaFileRecord` function in `enhmetafile.c` to minimize the risk of exploitation. As a temporary workaround, avoid using the `pCreatePen->ihPen` array index in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.