Integer overflow or wraparound in the Windows Raw Image Extension permits an unauthorized attacker to execute arbitrary code over a network. The flaw stems from improper bounds checking (CWE-122) and numeric overflow handling (CWE-190). Successful exploitation would give the attacker code execution privileges, enabling complete compromise of the affected system.

The vulnerability affects Microsoft Windows systems that include the Raw Image Extension component. Specific version information is not provided in the advisory, so all installations of this extension remain potentially exposed until a patch is applied.

The CVSS score of 8.8 indicates high severity. EPSS is not available, and the issue is not listed in CISA KEV, suggesting no confirmed exploits yet. The attack vector is inferred from the description: an attacker remotely sends a crafted image to trigger the overflow. The vulnerability does not require local privileges, making it dangerous for network-facing deployments.