A heap-based buffer overflow in the Windows Raw Image Extension allows an unauthorized attacker to execute code on affected systems. The vulnerability can be triggered remotely, enabling an attacker to run arbitrary code and potentially gain control over the compromised host. The flaw is a classic buffer overflow (CWE‑122) that compromises memory safety and permits command execution without user interaction.

The affected product is Microsoft Windows Raw Image Extension, a component of the Windows operating system. Specific sub‑components or version ranges are not listed in the advisory, but any host using this extension is potentially vulnerable.

The CVSS score of 8.8 indicates a high severity with full network access required for exploitation. Although the EPSS score is not available, the lack of a KEV listing does not reduce the potential risk; the vulnerability remains exploitable at the network level for any unauthenticated attacker who can trigger the overflow. Attackers would need to construct a malicious payload delivered to a system where the Raw Image Extension is active, leading to code execution.