A vulnerability was found on Windows Imaging Component.

A vulnerability was found on Windows Imaging Component was used to release malware through JPEG files.

Another popular method to run malware installation code or code to allow hackers to enter the victim's machine is to hide code in a harmless image file to run the code remotely, or RCE (Remote Code Execution). This is often attributed to the security vulnerability of the system itself, such as in this news.

According to a report by the website, Cyber Security News has mentioned the detection of a security vulnerability in part of the Windows Imaging Component, a Windows internal library used to process an image called WindowsCodecs.dll in versions 10.0.2610 0.0 to 10.0.2610 0.4945. This file is used to process basic image processing such as JPEG, PNG, GIF, and BMP. The vulnerability is coded CVE-2025-50165. This vulnerability has a Serious Score or CVSS Score of up to 9.8 or Very Serious. For this vulnerability, it is an Uninitialized Function Pointer Dereference vulnerability. It is simply described as a vulnerability in which the program invokes a function by using a Pointer that has not been assigned a valid memory address, causing it to be uninitiated, leading to a backlog and unauthorized code intervention by hackers. This vulnerability opens during processing or compresses the JPEG family of color depths on 12-bit and 16-bit levels.

The function pointer (Function Pointer) is called compress _ data _ 12 and compress _ data _ 16 that should be executed during compression or processing of a JPEG file with this feature. A backlog occurs. If a JPEG file with this feature is hidden from malware code, it will lead to malware execution at this stage.

But in that test, the research team found that the vulnerability may not be as serious as initially estimated, because to use the vulnerability, it must be specific to attack applications that use the troubled version of the WindowsCodecs.dll file, and the application must allow re-encoding of the JPEG file to lead to RCE conditions, where the victim simply opens the image cannot lead to RCE. Repeating the JPEG file must have a color depth of only 12 bits or 16 bits, which can happen. Not often, as it usually occurs during the creation of small thumbnails and the recording of new image files by the target victim. Not only that, in order to use this method, hackers need to access Heap memory to access the address of the leaked data, the research team says that such a vulnerability can be used outside of experiments.

Users who regularly update Windows have no need to worry about security because besides the vulnerability is difficult to use, the latest update from Microsoft has been successfully filled.

# Welcome 2026 # Take care of yourself # Open budget # Includes IT matters # microsoft