CVE-2016-3216

MEDIUM

Windows GDI32.dll - ASLR Bypass via Graphics Component Information Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-3216. PoCs published by Google Security Research.

AI-analyzed exploit summary The writeup describes multiple heap-based out-of-bounds read vulnerabilities in gdi32.dll due to insufficient sanitization of DIB (Device Independent Bitmap) data in EMF (Enhanced Metafile) records. These flaws can lead to memory disclosure, potentially aiding in ASLR bypass or information theft.

Description

GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windows Graphics Component Information Disclosure Vulnerability."

Exploits (1)

exploitdb WRITEUP VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/39990

The writeup describes multiple heap-based out-of-bounds read vulnerabilities in gdi32.dll due to insufficient sanitization of DIB (Device Independent Bitmap) data in EMF (Enhanced Metafile) records. These flaws can lead to memory disclosure, potentially aiding in ASLR bypass or information theft.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Windows gdi32.dll (Windows 7 tested)
No auth needed
Prerequisites: Ability to deliver a malicious EMF file to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/39990/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036101

Scores

CVSS v3 4.3
EPSS 0.2499
EPSS Percentile 97.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (10)
microsoft/windows_10
microsoft/windows_10 1511
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
microsoft/windows_server_2012
microsoft/windows_server_2012 r2
microsoft/windows_vista
Published Jun 16, 2016
Tracked Since Feb 18, 2026