PT-2025-32788 · Microsoft · Graphics+1

4N0Nym4U5 · Published 2025-08-12 · Updated 2026-04-23 · CVE-2025-50165

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions (affected versions not specified)

Description A critical issue exists in the Microsoft Windows Graphics Component, specifically within the windowscodecs.dll library. This flaw is an untrusted pointer dereference that allows a remote, unauthorized attacker to execute arbitrary code on a vulnerable system. The issue can be triggered by a specially crafted JPEG image, which can be embedded within documents like Microsoft Office files or even sent as an email attachment. The vulnerability does not require user interaction in some cases. Exploitation involves techniques like heap spraying and Return-Oriented Programming (ROP) chains. Control Flow Guard (CFG) is disabled by default for the 32-bit version of windowscodecs.dll, while the 64-bit version requires a CFG bypass for successful exploitation. The vulnerability affects any application that utilizes the Windows Graphics library.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use of Uninitialized Resource

Untrusted Pointer Dereference

Weakness Enumeration

CWE-908

CWE-822

Related Identifiers

BDU:2025-10072

CVE-2025-50165

Affected Products

Graphics

Windows

References · 50

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50165 · Security Note
• https://bdu.fstec.ru/vul/2025-10072 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50165 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50165 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50165 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-50165 · Vendor Advisory
• https://twitter.com/ArjunGU2/status/1983473843676291260 · Twitter Post
• https://twitter.com/ivan_windon/status/1960373283854967013 · Twitter Post
• https://roboshadow.com/blog/patch-tuesday-august-2025?rid=socialpost · Reddit Post
• https://twitter.com/RedaAnoar/status/1955808543455539222 · Twitter Post
• https://twitter.com/ArjunGU2/status/1991716158693863678 · Twitter Post
• https://twitter.com/gothburz/status/1991703385590907095 · Twitter Post
• https://twitter.com/DijitalBiz/status/2005341123766591932 · Twitter Post
• https://twitter.com/0x534c/status/1991800513919414519 · Twitter Post
• https://t.me/purp_sec/1027 · Telegram Post