2016
10.31

The DxgkDdiEscape handler for 0x7000170 lacks proper bounds checks for the variable size input escape data, and relies on a user provided size as the upper bound for writing output.

No Comment.

Add Your Comment

You must be logged in to post a comment.