Liang Zhu

A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

Insecure default variable initialization allows an unauthorized remote attacker to bypass a security feature, specifically authentication, over a network.

A heap-based out-of-bounds write occurs during WebP image decoding due to improper handling of bitmap stride and target buffer formats. This issue can lead to an application crash.

Multiple buffer overflow vulnerabilities exist in the User-ID Terminal Server Agent (TSA) component. An unauthenticated attacker with network access can send specially crafted network traffic to cause a denial of service (DoS) condition or potentially execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations.

During the PRC parsing stage, a lack of boundary verification for the PRC entity index allows an out-of-bounds read of the entity array, causing the application to crash.

The application crashes when opening a PDF containing an abnormal color space. This occurs because the attributes reference a valid but semantically malformed function whose output is not validated. When the output is read, it generates an illegal pointer that accesses an out-of-bounds region, leading to an out-of-bounds read (OOB Read), which is a condition where the software reads data past the end of the intended buffer.

An issue occurs when the application opens a PDF file containing an abnormal Unity 3D object. During the parsing process, the application incorrectly resolves a portion of the object as a pointer and uses it as a valid address, leading to a type confusion or invalid pointer dereference that causes the application to crash.