Microsoft Windows Codecs.dll Sniff AndConvert ToWide String Information Leak Vulnerability
Cisco Talos disclosed TALOS-2018-0644 (CVE-2018-8506), an exploitable memory leak in the SniffAndConvertToWideString function of WindowsCodecs.dll version 10.0.17134.1, where a specially crafted JPEG with malformed metadata causes the library to return...