PT-2025-32850 · Microsoft · Windows Gdi +1

Gaborseljan

+1

·

Published

2025-08-12

·

Updated

2025-08-31

·

CVE-2025-53766

Report an issue
CVSS v2.0
10
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions:

Windows GDI+ (affected versions not specified)

Description:

A heap-based buffer overflow exists in Windows GDI+. This allows an unauthorized attacker to execute code over a network. The vulnerability enables remote attackers to execute arbitrary code and affect the system. More than 100 vulnerabilities were addressed in Microsoft’s August 2025 Patch Tuesday updates, including this critical remote code execution bug. No exploits in the wild have been reported, but the vulnerability is publicly disclosed.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-09749
CVE-2025-53766

Affected Products

Windows
Windows Gdi