Windows Imaging Component Vulnerability Can Lead to RCE Attacks Under Complex Attack Scenarios

This report analyzes CVE-2025-50165, a critical Windows Imaging Component flaw in WindowsCodecs.dll where uninitialized function pointers during compression of 12‑bit/16‑bit JPEGs can cause crashes and, under complex conditions, enable remote code execution; ESET’s analysis finds real-world exploitation unlikely without precise prerequisites (re-encoding behavior, address leaks, heap manipulation), and Microsoft has released patches—organizations handling untrusted images are advised to apply updates.