Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-17022

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Description

<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p> <p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1803

  • N/Aaffected

Microsoft Windows 10 Version 1809

  • N/Aaffected

Microsoft Windows 10 Version 1909

  • N/Aaffected

Microsoft Windows 10 Version 1709 for 32-bit Systems

  • N/Aaffected

Microsoft Windows 10 Version 1709

  • N/Aaffected

Microsoft Windows 10 Version 1903 for 32-bit Systems

  • N/Aaffected

Microsoft Windows 10 Version 1903 for x64-based Systems

  • N/Aaffected

Microsoft Windows 10 Version 1903 for ARM64-based Systems

  • N/Aaffected

Microsoft Windows 10 Version 2004

  • N/Aaffected

References