Home
Description
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
PUBLISHED Reserved 2025-07-09 | Published 2025-08-12 | Updated 2025-09-17 | Assigner microsoft
CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Problem types
CWE-122: Heap-based Buffer Overflow
Product status
10.0.17763.0 before 10.0.17763.7678
affected
10.0.17763.0 before 10.0.17763.7678
affected
10.0.17763.0 before 10.0.17763.7678
affected
10.0.20348.0 before 10.0.20348.4052
affected
10.0.19044.0 before 10.0.19044.6216
affected
10.0.22621.0 before 10.0.22621.5768
affected
10.0.19045.0 before 10.0.19045.6216
affected
10.0.26100.0 before 10.0.26100.4946
affected
10.0.22631.0 before 10.0.22631.5768
affected
10.0.22631.0 before 10.0.22631.5768
affected
10.0.25398.0 before 10.0.25398.1791
affected
10.0.26100.0 before 10.0.26100.4946
affected
10.0.26100.0 before 10.0.26100.4946
affected
10.0.10240.0 before 10.0.10240.21100
affected
10.0.14393.0 before 10.0.14393.8330
affected
10.0.14393.0 before 10.0.14393.8330
affected
10.0.14393.0 before 10.0.14393.8330
affected
6.0.6003.0 before 6.0.6003.23471
affected
6.0.6003.0 before 6.0.6003.23471
affected
6.0.6003.0 before 6.0.6003.23471
affected
6.1.7601.0 before 6.1.7601.27872
affected
6.1.7601.0 before 6.1.7601.27872
affected
6.2.9200.0 before 6.2.9200.25622
affected
6.2.9200.0 before 6.2.9200.25622
affected
6.3.9600.0 before 6.3.9600.22725
affected
6.3.9600.0 before 6.3.9600.22725
affected
16.0.1 before 16.0.19127.20000
affected
16.0.1 before 16.0.14326.22618
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766 (GDI+ Remote Code Execution Vulnerability) vendor-advisory
cve.org
(CVE-2025-53766)
nvd.nist.gov
(CVE-2025-53766)
Download JSON
