Pinned post
#CVE-2022-38006 is a heap-based buffer overflow in the MfEnumState::OutputDIB() function that allows disclosure of (un)initialized heap memory due to improper bitmap compression handling when processing an EMF metafile with an EMR_STRETCHDIBITS record. seljan.hu/posts/out-of-b…