Windows Raw Image Extension Remote Code Execution Vulnerability
Impact
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
Source excerpt · microsoftAffected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Raw Image Extension
Platforms: Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for HoloLens, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 20H2 for 32-bit Systems, Windows 10 Version 20H2 for ARM64-based Systems, Windows 10 Version 21H1 for 32-bit Systems, Windows 10 Version 21H1 for ARM64-based Systems, Windows 10 Version 21H1 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 11 version 21H2 for ARM64-based Systems, Windows 11 version 21H2 for x64-based Systems, Windows 11 version 26H2, Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems
| Version / range | Source status |
|---|---|
| 2.1.0.0 to before 2.4.36.0 | affected |
Original source description
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.