CVE-2025-36853

Name of the Vulnerable Software and Affected Versions: msdia140.dll (affected versions not specified)

Description: The software contains a heap-based buffer overflow condition, where a buffer allocated in the heap portion of memory can be overwritten. Additionally, an integer overflow or wraparound can occur when a calculation produces a value too large to store in the associated representation. This occurs when an integer value is incremented to a value that is too large to store in the associated representation, potentially resulting in a very small or negative number. This issue affects only End Of Life (EOL) software components, and Microsoft will not provide future updates or support.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.